But, not surprisingly, "For most users who are emailing, reading some web forum, social media, and maybe office that matters very little." don't understand or know how to do rolling backups or operate a VM, so keeping their OS up to date is the best option. Denying them that, regardless of how little they use the internet, is reckless at best.