I will answer the question first.
I'll explain the difference between technical debt and legacy system risk.
First, the older the systems, the more expensive it is to maintain them. It's like buying a car and not putting oil in the engine: sooner or later, you'll have to replace the engine.
Second, as systems age, cyber risks increase because systems are exposed for much longer to cyber attackers.
I will turn the floor over to Mr. Jones to explain this risk.