They get only security fixes. So if there is some system component that is buggy under some circumstances it stays that way. Part of native windows development is constant workarounds around old buggy dlls