Microsoft does do that, they EOL their software like any other company that stays in business long enough to do so. You can't get support on win95 and assume all responsibility for someone hacking your computer should you continue to use it.
There aren't any free forums out there that offer decent long-term security protection. What's secure today won't necessarily be secure tomorrow, as new ways are found to break a script that wasn't available today.
It's up to us as site owners to do what's necessary to maintain our sites security-wise and that includes updating the software - I upgrade every time a new version comes out, especially if it contains bugfixes/ security fixes. I don't want all my hard work to go down the drain due to some script kiddie playing with my site. 6.7.3 has been released
more than a year and a half - no reason why site owners shouldn't have updated by now, the release announcement shows in your control panel every time you access it.