It’s fine to leave a pneumatic HVAC control system in place as long as it’s maintained. There’s no front end that needs security updates. A 40 year old panelboard that has been maintained is similarly fine to leave existing.

When you’re exposing a microcontroller to the internet that controls the conditions that physical inventory is held in, it’s probably best to make sure you’re getting security updates.