That probably does read badly, sorry. It was meant as a comment on the overall picture I see (not focussed on individuals in the UK by any means), based on the fact that we are still seeing so many old unpatched sites around.
Every time I send out Moodle security notices to our registered admins (currently around 45,000 people from all educational sectors around the world) I get back at least 1000 private emails, and many of them are from poor sods looking after an old Moodle site with no clue how to upgrade or even how to follow our documentation about it. There's even people in this discussion on 1.8.3 still, for example (See version history Moodle version history - MoodleDocs)
There must be many more unregistered users world-wide who used a one-click Fantastico install or Ubnuntu package or something who we can't even contact and wouldn't even think to visit Moodle.org: Security news. This is why we now have a new Security report built into Moodle (in 75 languages!). I really hope that helps people tighten up their sites.
Constructive suggestions to improve the situation are always welcome! No-one wants to let spammers win.
