This is true, you'll notice atm machines when under maintenance shows the classic XP screen. Though I do not know, why they still use that.
Updates are issued but they are typically on CD-ROMs from the software vendor, and unless the tech servicing company is going out on a monthly basis the machines are not patched or current. It was not uncommon to tack on 6 different upgrade disks to a maintenance call because that machine hadn't been patched since last year.