In other words, not necessarily. But they might be hard to update.

<script type="text/javascript">alert("remember when scripting attacks worked?");</script>