There are some shockingly old releases of PostgreSQL still in production for this reason.
Security updates should push the upgrade path a little harder, but there are still cases where a database can be completely isolated from the network and that might not even matter.
