The expense of a security breach caused by not upgrading from a "no longer supported" operating system will far, far exceed the cost of upgrading.