One must wonder why Windows XP was selected for anything remotely mission critical. A big fail on someones part there IMO. I'm surprised your systems have been able to run 1 week without crashing lot alone years! So you don't do any security updates I guess and the XPs have no physical connection to Internet.
I chose it. I did that for a lot of reasons that I can go over if you want me to explain (although please don't ask me to go into it if you're not honestly interested, as it will take me some time to type up). It is clearly not a big fail since these machines and the software on them have just about perfect up time records over the years, not just in our own production facility but in customer facilities in numerous other locations in the US and in other countries (installations in UK, Italy, France, Australia, Switzerland, Canada, China, Japan, Taiwan, Korea, Russia), including biology labs with little or no IT support. Yes, we do security updates, and they are hooked to the Internet (through routers and firewalls).
These are for device/equipment control, not as a web server, huge database server, etc. The software they run is software we (mostly I) wrote. I would not recommend Windows machines for running a bank, or airline reservations, or a web hosting business, etc. I wouldn't pick it for airliner flight-control software. Different realms have different characteristics and different sets of solutions that work best.
I have worked on a lot of different systems (Apple II's, Macs, Lisas, Sun workstations, NeXT workstations, DOS PC's, Windows 95 PC's, OS/2 PC's, Unix PC's, and various microcontrollers, even a little on old Amdahl mainframes) in a lot of different languages (Fortran, LISP, Pascal, BASIC, assembly of various sorts, Prolog, C/C++, Perl, Python, Java) and done a lot of coding for process automation and instrumentation control (for small companies as well as large cap and multinational companies). I'd still pick what I did as the best course for those various reasons I can go into.