If the system is suitably firewalled, it&#x27;s OK to not update regularly.<p>If the system is sufficiently <i>critical</i>, it may be hard to update or migrate it. And if it&#x27;s still safely working there&#x27;s no real incentive to do so.