There is a lot of legacy IPSec out there. For example AWS Site-to-Site VPN seems to still be IPSec.