Your attack surface grows as old accounts, unpatched systems, and persistent vendor access accumulate. The result is a larger set of entry points attackers can exploit.