unSpawn, no it isn't laziness..on my day-to-day-usage-pc I do lots of stuff, meaning updates and so on. it's just that on old machines doing updates means a lot of time, and in this particular case I don't see any big reason to update it every day...
if you are interested, the machine I mentioned does work in a network - a small one. most of the time there are only about three machines connected to it, and none of them is that vital..the machine I'm talking about is my "test"machine, that is, I run firewalling and other security stuff on it, testing and practising my skills. I think it's far more secure than my own day-to-day-pc, even though I run a "newer" distro on this one..but anyway, I don't feel I need to change the old RedHat just because it isn't updated anymore. if I need updates, I do them mostly myself..
you said it's dangerous keeping old distro..yes, I agree. I know this because I've studied the subject, security, but as I said I don't need the newest stuff around at the moment for a testing-machine..things may change in the future, but for now it is and remains that RH is there.
so, here's the thing: if you are concerned about security, update your distro...but if security isn't a question of life and death, then it's not that big deal having RedHat. many people have Windozes, even though they are far from secure no matter how you update them