It's the windows 10 refusenik risk. You can pay for a one year extension. I think this is "if you owe the bank 200 million the bank has a problem" stuff: if Microsoft really do stop issuing fixes for live attacks, that's a huge surface of the internet going zombie/rogue. Every national CERT worldwide will be asking Redmond to revisit the decision.
It's 40% or more of the global surface of Microsoft acquired risk.
It's 40% or more of the global surface of Microsoft acquired risk.