Yes, updates ended. Support services ended too, but that was nonexistent from Microsoft so not many end users / consumers had access to it, only corps paying for it.
Because most exploits these days are ‘specially crafted email, you need to do what the email says’ security is probably not...