That's probably true to some extent. The security of these older systems also undoubtedly benefits from the much smaller attack surface. They typically have far

That's probably true to some extent. The security of these older systems also undoubtedly benefits from the much smaller attack surface. They typically have far fewer services (network or otherwise) and simpler interfaces between components. If known vulnerabilities were patched, I can see how it would be easy to trust a simpler, legacy platform over a modern platform. Very few experienced professionals I've worked with (myself included) posses a working knowledge of a modern OS's services and persistent processes - that's a lot of trust to place in the platform. There's something to be said for the time when you could have an inside out understanding an OS, its libraries and its binaries. I thought vanilla Android was overly complex, but one look at the running processes on a Samsung S7 and I was horrified. The same can be said of OSX or a recent mainstream Linux distribution. I'd happily take a less flexible but much simpler OS over what we have now. Removing all those layers of services and indirection might increase short term development costs, but I think it would be worth it. Modern computing has me feeling more and more like a grump old man. I'm only 30.