Software from 2019 is horrifyingly outdated? If updates with security patches exist but haven't been applied, sure, but that's not really a default scenario depending on the stack.
I’ve only used 2020 because of the example in question. Security patches might or might not have been applied in both my imaginary example and in real world.