Microsoft doesn't stop shipping security updates after a new version is released.

Splitting hairs about what a version is won't recover the point that you simply cannot let complex software idle as installed most of the time, especially when big bad CVEs are being found all the time.

It's not like you get security updates if your subscription has lapsed.