For quite a while, IE 6 was Microsoft's flagship browser. We knew it was insecure. Somebody (Secunia?) even recommended that we *_strongly_* consider switching away from IE6 to *_any_* other browser.
But important sites like my bank standardized on it. Several years after Firefox came out and Netscape became SeaMonkey, I still got warning pages that "Netscape is not really supported on our site" or similar. Did my bank's web developers fall asleep and miss the name change? Did AOL give the outdated Netscape broswer to their users and this warning was directed at them?
Then Microsoft came out with IE7. Even larger and more complicated (just like the bug-fixes that MS had to follow up with). Then IE 8. More of the same. Microsoft talked about the improved customer experience, but I was more interested in the security settings, and after years of Netscape/Firefox, I barely understand some of them ("medium-high" security, "third-party" cookies, "zones" and so forth).
I don't visit questionable sites, I use the hosts file at hosts-file.net and I don't click on every random e-mail attachment (open it first in linux to verify the audio/video/pdf or whatever), and I use Firefox 99 percent of the time in XP (and 100 percent in linux). And banks don't *_require_* MSIE anymore.
Now, add the usual Microsoft bashing on slashdot ("Seven is just as insecure as Vista", "MS played a role in the SCO affair", "IE is still insecure", "activation/WGA is a hassle", "security features are easily defeated").
Why don't I upgrade? I don't see a reason or a need.