I hate to victim blame, but he's entirely at fault for the predicament he's in. It was widely known that legacy extensions would be phased out it 56, and a few searches related to firefox 56 will tell you that ESR would be the only branch that supports both legacy extensions AND will recieve security patches past 56. So he should have switched over to ESR before 53 came out.