To start, it's a 16-17 year old water heater, which is well past it's prime freshness date. The dregs of the sacrificial anode are probably resting in pieces in the sludge at the bottom of the tank- it might leak tomorrow, or go another 5 years, but it's life cycle is really about up. The 24/7 standing pilot ignition no longer meets US standards, and it wouldn't be insane to swap it out before it leaks if she plans to keep on living there.
Thermocouples covered with soot & varnish can cause the controls behave as if the flame were out, and turn off the gas supply to the pilot. Sudden air currents from opening or slamming a nearby door can sometimes blow out a standing pilot too.