If it ain't broke...we can't sell it?

I don't understand why Microsoft completely revamped IIS 7.0, changing the security model from the ground up.

I think it's the old saw about "Job Security": everyone having to start over once in a while keeps them from being able to say, "We don't need to upgrade--it's the same old, same old...".

Plus it sells more books.