10 years of running a website without security updates
get powned and lose control over user data
It's like fucking hookers for 10 years without condoms ans wondering why you got gonorrhea.
Should you be legally required to keep your web site up to date? What consequences should you face if you make tons of ad money, but don't invest a cent in security or updating your software.