Plenty of manufacturing still uses outdated OSs because they have to because they vendor no longer exists, doesn't care, or the machine itself is old and no longer supported. Manufacturing plants are also excellent targets.
But no one is spraying the internet with exploits to catch those manufacturing plants running ancient OSs. Attacks on those places and their ancient OSs would be reserved for targeted attacks.