Yes, you read that correctly: Win7 machines don’t get free
security patches, but they do get a free copy of Chredge
And it’ll happen whether you’ve signed up (and paid) for
Extended Security Updates or not.
You need to have at least the March, 2019 Servicing Stack
Update, and the SHA-2 update KB 4474419. But if you have those,
you get Chredged.
Imagine. MS can’t give you security updates, but they sure as
shootin’ will push Chredge on ya.
Same applies, mutatis mutandis, for Win8.1.