Swiss train stations seem to be using ~15ish year-old software. On one hand, what’s the risk if it’s on a dedicated network. On the other hand: every country should have a software engineering agency to help/maintain/advice public entities. They could maintain an always up-to-date base image.