The really evil malware creators use their skills to bring in money,
and now there are so few remaining XP computers in use
to generate much criminal cash flow.

Crime has to pay.

Microsoft should release to the public all the XP software security fixes they were paid with US Tax payer money to keep writing
after “free” security updates for the general public ended
in order for the US Navy Submarine XP systems to keep running.

I would not bet against the assertion
that the best knowledge base of unpatched XP flaws
is in Israel.