Simply because Windows XP is indeed a successful OS created by Microsoft, that numbers for sure are people knew how to setup strong lock down procedures to avoid massive attacks.
Honestly they can go to Linux instead, as it will save more time and effort, just learn the OS itself.