If you have a codebase that has no security implication and won't receive significant benefit from improved productivity/stability from a more modern language,

If you have a codebase that has no security implication and won't receive significant benefit from improved productivity/stability from a more modern language, almost certainly not. Such projects exist. That's fine.