Some java 8 applications are on life support with 0 developer time. But must be patched against CVEs because compliance.