Maybe the cost to make the customer whole after the fact is less than the cost to fix the bug. Legacy systems need to be stable, and bugfixes without experts around could cause later issues.