[ozim]

I would say using on-prem products and never updating them because of penny pinching is much bigger business risk.

[yjftsjthsd-h]

What business risk does that incurr?

[belthesar]

Other than running a highly complex web application that would no longer be receiving maintenance and security patches, of which due to its age and stack appears to be a frequent cause for concern, I'm sure not much.