The Moral Dilema of Windows XP

Do we have a moral obligation to respond if we see someone using a clearly outdated operating system like Windows XP? Is it along the same lines as “if you see something, say something?” I guess it comes down to risk management. If the deprecated OS is observed using sensitive or personal data (such as in a doctor’s office), the need to do something is elevated. If you see it driving an electronic billboard, well maybe not so much.