I agree, with one important caveat...
When no more security updates are being produced for that O/S one must be
extra cautious to avoid "suspicious" (= almost all) attachments and use
powerful anti-virus, anti-spamware etc. tools.