Network never patched

I am a contractor who was hired to a small bank. I was brought in to migrate and fix things, I did good and was hired. Now they want me to manage the network among other things. They have a Symantec hard ware fire wall all in one device. They think it is enough to protect them from the bad guys. With Windows 2000 and XP pro work stations, XP came with SP1 and the 2000 workstations are at SP3. Even the servers are not updated past last years patchs. I was told that auditers are coming in soon to look at the whole system from the ground up. My boss a general office manager who picked up his IT skills as he went along thinks that the contractors they hired to set the network up two years ago are perfect. And his boss also self taught thinks the network runs fine, dose not need any updates or patches. I had my problems with them as a contractor now if I am in charge of the network but not really will I be a scape goat after the audit? I ran a few quite programs I can not do too much they did not give me full rights as a administrator, and have my concerns about things that I found on the severs. Should I cut and run?