Microsoft came back and confirmed that security bulletins will cease unless you have an extended support contract after April
I thought some time in 2017 was the end of Extended Support for Vista......
So any home users will get no security updates/fixes after that date.