If the software manufacturer's instructions are to stay in Windows XP, then they should be held responsible for patching the security flaws in the system they delivered - if they choose to use obsolete components, maintaining them should be their problem.
In theory you might be right, but pragmatically (and from an engineering perspective) it isn't going to happen and it is just fraught with possible problems. Best not to deal with an OS from 2001.
In many cases, they can probably upgrade using Win XP running on a VM in Windows 10.
