He is at risk of running into bugs/glitches that might’ve been fixed in the newest update. Not only that but he is missing out on new implementations of whatever program it is to make ease in using the program. With the computer not being updated, he is also at a higher risk of new/newer viruses, malware, etc as they aren’t patched or blocked on while the new update fixes whatever it is.