I do IT in a machine shop.
We have 3 machines that still have Windows 95 for their OS, 2 with Windows 2000, and 2 with Windows XP
These are not standard intel processor based PCs. They are RISC processors that run a real time OS that communicates with the machine PLCs, and Windows provides a nice interface for the operator to interface with.
Last time we got a quote, it was $14,000 to upgrade one of the machines to Windows XP. I am not sure they can even be upgraded to Windows 7. They still work, so why bother spending the money.
I have a Tool inventory kiosk that has Windows XP on it too. I could upgrade it to Windows 7 or 8, but I have no guarantee that the Kiosk will function normally if we do that. So we are not upgrading it. I have better things to do with my time.
None of the machines or kiosks have Internet access. I will take my chances that they are secure enough.