> Keeping an older interface around extends vulnerabilities and generates ongoing maintenance costs.

For the backend, sure. But HTML is HTML. HTML doesn't have "vulnerabilities" (unless you want to count javascript, which can be updated without changing the HTML) and doesn't have "maintenance costs." Nothing about updating the site for vulnerabilities requires changing the actual layout of the site.