Extended support ended in Jan 2020 and the paid ESU support ended in Jan 2023 [1]. Are you sure those updates aren't just defender/AV definition updates rather than actual OS updates?

[1] - https://learn.microsoft.com/en-us/lifecycle/faq/extended-sec...

Odd, there are still Windows 2008 R2 patches. Why? I thought ESU year 4 ended in Jan 2024...

WOW! Looks good. Thanks!

windows embedded standard

Perhaps: "Defender" is what I've noticed.

Anti-virus definitions, not really exhaustive security maintenance. Defender is their AV. The firewall/kernel isn't included, for example

How important that is, no idea! The firewall is probably passable but I generally don't know your risk profile.

Applications and the rest of the system offer a lot of surface area

You should try Start11, it gives you a classic Windows UI on modern versions of Windows that are still actively receiving security patches.

https://www.stardock.com/products/start11/

From the people who brought you ... Sins of a Solar Empire??

>Sins of a Solar Empire??

A game released 12 years ago and still gets regular patches? Completely fine with that.

I know, it's just weird they make games and Windows software.

Like Microsoft? ;)

looks more like the opposite to me

0patch* is supposed to help with these old systems, but I don't have experience with it beyond hearing about it.

* https://0patch.com/