Meh, Italy is in the same boat, if not worse.
I've seen database servers for register offices (the ones that log who you are and where/when you were born and what ID card they issued you) cards running on something that deceptively resembled win95 (and on hardware old enough to make that guess less outlandish).
Their system is relatively secure though even if ancient.
Why? Because it's closed. All data can move in and out of the building only if printed on paper (or through up-to-date servers/routers that filter stuff in/out, but this is still relatively uncommon).
It's a major PITA as you have to bring carts of printed stuff made by the same exact ministry, while someone would expect that they could have different database systems talk to each other and aggregate the data, that would cost too much. So they remain mostly isolated from each other.
For example, for my granma we need to bring paperwork to prove that she is receiving a pension from the state.
Every year. I mean they give her the money in the first place. Couldn't integrate data and stop madness? No they cannot.