Since these systems were from the 90ies they indeed did not get security updates. Most were only locally connected (for example OS/2 had a Token Ring in one bu

Since these systems were from the 90ies they indeed did not get security updates. Most were only locally connected (for example OS/2 had a Token Ring in one building). The WAN connection (for AS/400) was trusted.