Both would continue if Windows was "perfect" feature-wise and only security updates were provided going forward.
Therefore the kernel is secure, assuming spherical cows are used in the bubble memory of the return stack.
It seems to ultimately boil down to software becoming more expensive to sell, especially when it will be used in critical situations.
Legally, they are covered.
But there is also the more abstract problem of how hospitals and the like go about using computers.