Why Microsoft XML Core Services is the most exposed program on private PCs

This article is dated from about six months ago, but it caught my attention after Secunia PSI flagged it on a new Windows 7 computer, and previously on my XP machine. In both cases, Windows Update is saying all is well.

https://secunia.com/blog/why-micros...ram-on-private-pcs-for-11-months-running-384/

Secunia PSI's solution was to install the latest MSXML Service Pack, rerun Windows Update, and install some additional patches. I just did that on XP, and now Secunia is giving Core Services a passing grade.

Have any of you (that use Secunia PSI) encountered this of late on XP and beyond?

For what it's worth, I don't think MSXML 4 Core Services is native to Windows 7 and 8 / 8.1. I believe the only way you could have it installed is by running older software that relies on it.