In my university, we've been using Moodle for many years (>5y). There was a general negative opinion on the Moodle for very different reasons, from "it's ugly" to "it's not up to date", going through "everyone thinks it's crap, me too". Since 2 years I've been pushing the staff to update it, and hopefully fix all the concerns raised by the student and staff using it; and more importantly, fix all security issues that have been patched in the 7 new versions. (We're using version 1.9, and the latest release is 2.8).
At the beginning of this year, a new staff responsible for coordinating the teaching, set up Google ClassRoom as a mean to fix the general issue that people were not happy with the Moodle. But leaving the security issue of the Moodle which is still used as Google ClassRoom doesn't provide everything Moodle provided.
Eventually, an administrative staff worked the estimates on how much it would cost to perform the upgrade, and everything is ready to be updated. We just need the permission of one or two people, who keep saying that it can wait, or that's not the priority, and security issues are not really an issue.
How can I convince people to update Moodle? Am I paranoid on the security issue?