The Unsustainable Status Quo of Legacy IT: Debunking Security Myths