The author hits it on the head: financial institutions don't understand that stasis also has risk. I spent a couple of years at an investment bank that happily paid 5000 USD per server per year to run an out of date, critical bugs only copy of Solaris 8 as their production OS.
