I guess it's seen as easier to keep legacy scripts working, rather than risk an upgrade and having misson-critical scripts fail.

Tell us that again after you've had to deal with the aftermath of someone taking advantage of one of the n-plus year old holes.

Of course I'm terrible about changing the oil in my car, so I don't have much room to lecture on the virtue of preventiveness. :)