Withholding security patches for over a year is not a good look on anyone, regardless of how well loved your products are.