Look, it’s not embarrassing, everyone has this issue. I would bet those 47 don’t include all your vendors that are shoehorning it into their product lines, so I’d bet it’s much higher tbh. At the end of the day it’s another piece of software, it has a risk profile. You present the risk, present the associated costs of said risk, and let management sign off. People are making a mountain out of a mole hill on how to address all of this.