They keep using them. Most uses don't give a shit about security updates.