They did, as of 2015. Don't know if they still do.
And it's not necessarily that it's "safer" and "better" but they likely have a bunch of software that they either can't get to run on newer versions or they aren't able to qualify on newer versions. This happens a lot in regulated industries too, where it becomes cost prohibitive to qualify upgrades to systems to run on the newer OS-es, so it doesn't get done.
I know State Department still has 2003 servers running around the network somewhere. Legacy systems and incompetent management are a fucking security scourge.
They did, as of 2015. Don't know if they still do.
And it's not necessarily that it's "safer" and "better" but they likely have a bunch of software that they either can't get to run on newer versions or they aren't able to qualify on newer versions. This happens a lot in regulated industries too, where it becomes cost prohibitive to qualify upgrades to systems to run on the newer OS-es, so it doesn't get done.
I know State Department still has 2003 servers running around the network somewhere. Legacy systems and incompetent management are a fucking security scourge.