What about all the other patches they're holding back? This can't be the only security issue they've only selectively distributed patches for.
XP is 16 years old! Microsoft is in a tough spot, this was a worldwide problem so they had no choice.
They should make the support contracts for old version quadruple in price for every year and offer incentives to upgrades. Better for them, more revenue and less bad press for MSFT.