With the rate of CVEs scored at 9+ that come across all the stuff I manage at work I would not agree.

It would be foolish to simply stop patching this giant pile of obsolete insecure dependencies they are calling windows.