[Sprint60]

It also runs a little deeper than just the OS - a new OS will come with and supports new versions of software, especially web browsers which in turn support newer (more secure/unbroken crypto) security methods. It's a lot easier to crack the older versions of software, web browsers doubly so because it's open to a whole variety of outside attack vectors.

One of the more recent problems for me at work has been to disable SSLv3 and TLS1.0 for the websites that we offer, this causes Grandma's old computer to no longer be able to access those sites because her old web browser doesn't do TLS1.2.

If Grandma's grandson would update her computer occasionally she'd have a newer browser that can support the new protocols and she wouldn't be complaining to customer support who complains to me (often via my boss).

So back to the OP - I don't think it's anything new that MS wants everyone to upgrade. Yeah, there's money involved one way or another, so it isn't completely innocent, but keeping ne'er-do-wells out is vital so it isn't exactly a money grubbing scam either. I've heard the argument, "well this is an office machine and the web browser is never used." Don't you believe it! An awful lot of software is now web-browser based. For me, on my work computer, I will have half a dozen web tabs open to Office365, the load balancer, the firewall, the WPEngine console (I HATE word press), VMware vCenter, and more.

Bolting on security is not as effective as baking it in and even MS has become more security conscience in recent years so I'd say it's prudent to stay as current as possible.

That's my two cents. (Darn well all it's worth too!)