A mobile security awareness trainer is explaining what happens when a user ignores the 'Your iPhone software is out of date' notification for several months. Which is the MOST accurate security risk description?

• A.The vendor continues to patch supported releases indefinitely, and a handset several versions behind still receives security fixes on the older branch: the risk of ignoring the notification is a missing feature rather than a missing patch, with the security posture unchanged
• B.An outdated release affects catalog functionality alone, and the store refuses a download once the version falls too far behind: the risk is that applications stop updating, with the security position unaffected by the version the handset happens to run
• C.An outdated release matters for handsets attached to a corporate network, and a personal device is outside the concern: the risk is that the management platform marks the handset non-compliant, with the vulnerability itself unlikely to be targeted on a consumer phone