Problem is that they're also extremely vulnerable to any hacks discovered and fixed in the last 10 months (and counting).
I THINK they have security fixes on their own beyond that roll-up. But you could be setting yourself up for massive liability WHEN some of your clients get hacked. MAYBE microsoft would be included in the lawsuits (deeper pockets) for not fixing their security bugs without including their garbage, but that doesn't help you much.