And there is a lot of old hardware around hidden in factories or inside ships, which also rarely get replaced and still run old versions of the operating systems.
And especially in factories, some "smart" people often get the idea of moving such old hardware into the big intranet (which too often is just like the internet without people protecting you all the time from your decisions) as part of a industry 4.0 cargo cult instead of keeping them separated from the outside world.
For example, there is a nice French software called CATIA. Its version 5.0 is out now for decades, but still there are systems around requiring an old windows for running a 4.0 version of it because of the legacy files or conversion services. And there is no CATIA 5.0 conversion server around yet (that I know of), so you need to install it on a windows workstation (and be very cautious with updates) and make sure nobody evil notices it.