While clearly it's not ideal for them to be using XP wasn't the British government one of the purchasers of extended XP support? Has that ended now?
https://governmenttechnology.blog.gov.uk/2015/05/22/update-o...
I don't think it work out as a cost effective saving of course, as the NHS was badly hit by WannaCry as we all know.