It was a terrible idea when they were new OSes. I would question if anyone was even trying to attack those anymore, I think they’re still used in Asia and Africa.

Ironically, in some cases it’s more secure because modern exploits flat out don’t work or didn’t exist for it.

For the computer, maybe, but that’s the risks you accept. I’m sure this person understands the risk.