If those websites are still using flash, they kinda deserve to get cut off. If it's legacy, that's sad, but it's still better then the alternative. If it's not

If those websites are still using flash, they kinda deserve to get cut off. If it's legacy, that's sad, but it's still better then the alternative. If it's not worth the owners time to port, is it worth keeping around at the expense of a major attack vector?