Good Guy wrote:

any time after May 2014 the XP machines would be a weak-link
anyway because no new updates would be released for it.

Aside from being tricked into clicking on a spam attachment and running
trojan-dropper code, it's probably been the case for a few years now
that the average home and soho XP system is hacked via a vulnerability
in some Adobe product (flash or acrobat) or a vulnerability in the
browser (Firefox, chrome, etc).

For XP users that use primarily IE, then yes, WindozeUpdate fixes for IE
are useful.

But for XP users that don't touch IE but use some other browser, then
it's not likely that any Windozeupdates to come down the pipe over the
last couple of years has actually patched a vulnerability that would
have been of any benefit to that system.

In other words, IE patches aside, WindozeUpdates for XP is largely
irrelavent and has been for the past 2 or 3 years, because the typical
home/soho system is hacked either by running a malicious spam attachment
or through a weakness in a Mozilla or Adobe product.