Yea - you have to be up to date for anything you run - especially webservers/web apps like bulletin boards. New exploits are found for them with surprisingly regularity.
And as for the "if they put their energy into cancer" comment, most of the people don't have the skills to dig through code, find a vulnerability, and write an exploit for it - they just tend to use other people's exploits.
Some of the larger defacement mirrors have shut down in recent years, mostly due to lack of interest. How many times can you go mirror a webpage that some 12 year old kid defaced to say "omg im so kool! chek me out, d00d!" before you want to kill them? Not too many times
