I agree with you. But these changes cost money and corporate clients are often unwilling to take on these expenses because from their point of view there's no ROI, it's just dead fish on their budgets. The exception is the ones who do work for governments since they tend to be subjected to security audits and reviews and they can't stop bitching about it everytime they're reminded they need to spend this much or they're done selling to the government. Right now we're working with a client because they cannot have unsuported OSs anymore and since 2008 just got EOL'd they need to upgrade, but some of the ancient software they use is breaking down on 2019.