XP support died in 2014. Yes there were some fixes that popped up after for severe issues, but it's been an unsupported OS for 6 years. It doesn't support any modern security hardware.
Some people still run XP, though thankfully that number drops all the time. It's your data, but XP is a much easier target than 10 to attack.
A cursory check on the internet (not on your XP machine
) will show you the sheer number of voices calling for XP machines to stay offline, or preferably, be upgraded.
It's actually really bad advise to give someone to stick to Windows XP "if it ain't broke"... it is broke. The internet has evolved, the threats have evolved and I wouldn't recommend you drive your pushbike on the Autobahn either.