> You buy a piece of hardware that could trivially keep working for 5-8 years, and it becomes actively dangerous to use, not just for the owner but to everyone else (think botnets), after 3 years because the vendor stops giving security updates for its software? This should be illegal.

The simple way to make it illegal to produce potential botnet-hosts is to force manufacturers to remotely brick all hardware they no longer support.