My theory: the system they purchased was based on an older and proven design for railway automation and control. Add to that however said company/contractor was set up to support their customers (e.g. OS only ships on floppy). That said, I agree that ten years without so much as a drive upgrade is a bit long in the tooth for something that can kill people or become a logistic and/or political disaster if it malfunctions.