One X user suggested that the company switch to Windows XP—it’s also no longer updated, and it can run Windows 3.1 applications via compatibility mode.
Maybe that was a joke, but if anything that would reduce their security. Windows 3.1 and 95 are old enough that they can’t even run most stuff from the last two and a half decades, which probably protects them. XP is just new enough, and plenty old enough, to be very risky.