ESR version doesn't mean it has never received changes for 2 years.
The problem is not the lack of patches. The problem is with websites refusing service based on client's version from the user-agent or breaking by using cutting edge features without a polyfill.