That's true, however that was because the component they were updating also happened to exist on operating systems they are still currently supporting.

I doubt you'll see too many more XP security updates, that literally might be the last official one (unless you count packages which aren't intrinsically linked to the OS, like the .Net framework for one example).