Problem is, an individual computer user often isn’t the victim of that computer’s lack of updates.
Any time a site you like has been DDOSed, it’s often from thousands of zombie computers infected by some malware that their owners aren’t aware of. Those infections are generally made possible by unclosed security holes. So, you know…not updating.