Cant Trust em
Any copy of XP out there still using the internet has not been patched for a while now.
IE6 is dead dead dead thanks to Poodle.
I would question any business which relys on getting business from XP users as you cant trust, its more likely Malware browsing your site than the user.