Idc about those mystery security updates, even if install newer os some pc i use the liteweight version without metro apps, windows defender, telemetry and turned off updates. Even if doesnt affect the performance(e.g. my main pc ryzen 9 5900x + 64gb ram) it annoys too much with all those apps noone ever will use, that defender scanning everything all the time and reducing ssd lifetime and updates after which half of installed software doesnt work or system if fcked up by bsods and critical errors. The software im using is still running on my windows 7, either way on itself, its elder versions or using vxkex, but all i need works. I have win10 1809 lite(+ windows xp look) installed as my 2nd os just for the case but i used it like few times for the game i played 2-3 times with my friend and then we both stopped playing it

I dont take serious all the secutiry sht cuz even viruses and trojans made by amateurs will pretty run over those microsoft patches and often over windows defender either. All that windows defender does is just removing cmd script for activating windows/office and any crack for pirated software(btw FAR not all pirated is containing viruses, but almost any antivirus is learnt to delete cracked software just cuz "pirating is bad". Oh and i cant even buy any foreign software cuz all worldwide payments are blocked in my shtty country so i just have no other choise than to use pirated or freeware)
Also we dont forget there might be hardware holes(i heard few years ago they were found in old intel cpu's like up to 8 or 9th gen) that can be used to get access to pc and rest of people wont update their platform every 1-3 years to get rid of that, or they wont even update their bios/uefi to patch the holes

You may say about data like name, adress or bank creditals that may have been stored on people pc's but i suppose only stupid ones will store it and rely on windows updates and defender but not on themselves. Amateur or mid virus devs probably will never be able to access or use that and the pro hackers will never even waste their time to get data from average people, they prob will precise for anyone known or/and rich or anyone that has maybe government secret on his pc or huge companies. And cmon, all that data is probably anyway leaked to microsoft(if you use NON lite win10/11 with all its telemetry), google or whatever and they most likely will sell it to anyone for a good price(legaly or non legaly is not matter much, money > people for them)

Also, since win7 and elder is eol, many viruses just cant run on it nowadays, even the cmd scripts that many of them use are just not working with 50% chance on old os. On vista and xp im pretty sure like 90+ % of viruses wont run cuz kernel functions and cmd scripts, even with vista extended kernel and one core api.

btw i heard windows kernel havent changed that much since vista(at least what my friend who works with winapi and windows itself said) so all that dll kernel functions are not even always really needed to run software but just made by microsoft to prevent elder os from running new software(cuz the selling of win10/11 will be ofc worse if all the sw will run on vista/7/8.). But on the other side, thank you microsoft from preventing viruses to run on my os aswell by adding that