So should websites block all users not running the newest version of IE or Netscape because older versions have exploits? If you did that, you'd be alienating at least 50% of your potential users....