Because people don't understand the security implications of non-updated software?