Hi @jinnyzor , I appreciate your answers, time, and activity on the forum. Thanks for being there 
As we can see in your quote, it’s a “may be”.
As always: they don’t write "under some extremely rare circumstances, for a very small group of users, if this condition is met and these 234 others conditions are also met, then “an app may be able”.
They don’t write it, but in practice it’s often what it is.
Problems are that
- a very small number of people might be concerned.
- even if the group of possible impacted users was large, in case of issue it would be the consequence of their own choice.
- you can be sure that there is also pseudo security issues with iOS 15.7, 16 and 17. There are always been security issues, in every iOS, since 2007, and there will always be. It’s again and again the same cycle. Every now and then, they publish an alarming news, as an incentive to upgrade.
Let’s do a parallel , imagine a virtual situation where:
People buy cars that have 12, 13, or 14 airbags.
Every 6-12 months, manufacturers consider that “old” cars lack an airbag to protect drivers’ ankles in case of crash, and, in reaction to this, fuel stations prevent cars owners to buy fuel and fill their tank.
Cars owners have to pay to get a new airbag installed in their car to be able to keep using their car, and fill up their tank.
Very likely, this would be deemed absurd.
With discourse, the situation is similar:
People buy phone with iOS 12, 13, 14,
Every year, the manufacturer releases a new heavier iOS version, so that users progressively feel the need to upgrade the hardware. Manufacturer also prevents the most recent iOS to be installed on the oldest phones.
If you don’t upgrade the software nor the hardware, then a service provider starts preventing users to click on the login button.
Another one:
Cyclists should wear helmets.
Would it make sense for a restaurant to stop serving customers that don’t wear any helmet?
Then, assuming security updates are really important:
Smartphones users should update their phones.
Does it make sense for a website to prevent users to login on the website ?
We can login on our bank accounts, and many other website that do require securityy, from this very same iOS 14.8/Safari 14.8.
But we can’t on Discourse. Which is, basically, a forum.