> That's not fair to the manufacturer. No company on Earth can fix security holes in every version of their software that's ever been released. It would take a small nation's GDP to do that. Even Linux doesn't fix security holes in old versions of the kernel.

That’s their problem then.

EDIT: It’s not acceptable for consumers, especially in an age of "smart things" where their toilet, car, or in the next few years, even their house/apartment might fail, stop working, be infected by ransomware, etc due to missing security updates. At least if you sell software for Smart Things, you should have to put the source code in an escrow, and it would be published as soon as you stop supporting it.