A lot of the long-term support for OSes are for security updates. I’m sure they haven’t added new features in a decade or more but security patches keep rolling out. These cover not just actual bugs in the code but also addressing evolving standards for encryption, hardware insecurities, etc.