Windows 7 Extended Security Updates were still there until January 2023, and if you know where to look, there's a guy, I believe he's Ukranian(1), who's been providing the ESU updates for mortals (non-corporate users). But yeah, "Download an EXE provided by a mysterious man to keep your OS 'secure'." isn't really a safe policy.

https://techcommunity.microsoft.com/t5/windows-it-pro-blog/u...

(1) The EXEs are signed with a digital signature where the signer's address is Kherson, Ukraine.