I really don't get the concept of people being "stuck on XP": Vista shipped in 2007, so if your company wrote software after that that was locked to XP they made a mistake - one they've had EIGHT YEARS to fix. Everything except the most expensive, vertical-market hardware (that might require XP for driver support) has nigh-certainly already been depreciated to zero on the books.
Let me play the devil's advocate: Why should I as a user be forced to upgrade from a system which does it's job just fine only because the system's manufacturer decides that they don't want to spend any more resources on patching up errors in this system? Having bought the system, shouldn't I have gotten a product that is reasonably secure in the first place? How do I know that the new shiny replacement system doesn'…
For example look at speedtest.com in a windows browser, when you really meant speedtest.net ... This is only a single example, it happens and bad people are out there.