Ultimately, it’s not the WordPress Team who is responsible for the security of users’ websites. The users are. The team’s resources are better spent focused on making the current releases as secure as possible in the face of increasing, more complex threats.

Stop coddling users who don’t keep up with upgrades.

There’s no defendable excuse.