The amount of corporate environments running old builds, 3+ patches behind or pro/home versions would shock anybody with an inkling of security awareness.

If you’re going to run Windows as a business and especially if you’re going to rely on Defender, you gotta be on top of shit. Most are woefully far outside of that

They’re not withholding, this is a normal lifecycle for their OS’es (technically this one is already an extended deadline due to covid). The fact that Win10 had a 10 year life is the first time they have done so (LTS builds not withstanding). The amount of vulnerabilities and patching necessary to keep that husk going isn’t worth the squeeze to them.

Even Linux builds are lucky to reach 10 years of support on a given kernel.

Mint Life Cycle

Ubuntu Life Cycle

The OS being unsupported is a terrible idea. Especially is you’re relying on Defender for EDR… either switch OS’es or upgrade. There is no sense in running vulnerable devices. You’re only creating more attack surfaces. I sympathize with the user that can’t afford an upgrade, but they gotta aware and accountable of the consequence. Arch, btw