On the other hand, that's the reality of software development and should already be priced in. WannaCry was so painful because WinXP and Server 2003 were still in operation, and I bet that was because there were applications that just couldn't be migrated away.