Earlier quoted context omitted.
I think that's the issue though: You're seeing "Linux users" that only use Linux on their servers because they are somewhat forced to do so. I would actually expect that almost all of those people use Windows or MacOS for their local development.
And those hosts often are not using up to date packages and don't even have up to date security fixes at times. I recently moved a wordpress site I was working on from a local dev setup onto a live bluehost server and was immediately hit with a bunch of out of date package warnings. As the customer was using some cheap shared hosting service, there wasn't much I could really do about it.
Too many customers run really old versions of code that need older versions of PHP and so on. We can't not provide them without losing the business. We do of course, make newer versions available.
The other fun one we periodically get is customers doing PCI scans or similar and getting warnings for out of date versions of OpenSSL, Apache, etc. Nope; just backporting showing the old version numbers.