But if these machines are so isolated, and given they've been running with the "if it ain't broken" mindset: why, and more importantly how do they even get upda

But if these machines are so isolated, and given they've been running with the "if it ain't broken" mindset: why, and more importantly how do they even get updated? If they aren't being updated, why discuss constraints on updating them?