anyone can enable extended security updates for free using MAS