Microsoft also forced to keep these legacy code tbh

You see, most enterprise client with big enough contract can force to do this and MS need to support this customer until they migrate or if they ever be at all

I may argue for any big legacy enterprise software, its easier to rewrite the damn whole thing than to support the legacy code forever but they cant do that even if they have motivation/resource

They could put it behind a flag, like LANMAN auth.