Operating systems that have passed their End-of-Life cycle present severe security vulnerabilities if exposed directly to the internet or untrusted internal networks.