Additional question to original post

If he is using a good anti-malware program (eg. Norton internet security with firewall, etc.) with his Xp PCs, upgrading to Win7 or 8 still offer additional security?
Pleae note that he is not concerned about minor performance gains or fancy new features and XP is serving his needs just fine.