I feel "we" (IT industry, IT security people, etc) need better analogies to convey to non-tech people issues with outdated or insecure software.

IMO, food seems like a good analogy:

- EoL software = food that's past its "best before"/expiration date

- known vulnerability = spoiled food

- high-risk software = high-risk food (example: "deserializing arbitrary user input" would be an equivalent of food containg raw eggs or raw minced meat)