People can still keep using XP for as long as they want as long as they keep the machine physically disconnected from the internet!

The big risk is remote exploitation[most of the time].