people running "older versions that no longer receive security updates" are unlikely to update to some new patch-stream from this tooling, because they're already not maintaining their infrastructure.