This is frankly a rather compassionate move on the part of Microsoft to release patches for these unsupported platforms.  I do realize that the argument is often made that regulatory requirements and vendor platform requirements prevent companies from upgrading to the latest operating systems available, but in many situations, upgrades are not performed simply because of the hard and soft costs associated with such a project.  Microsoft is being borderline benevolent in providing these patches in a post-support world.

https://www.darkreading.com/endpoint/microsoft-security-updates-include-windows-xp-server-2003/d/d-id/1329139