Guaranteed upgrade cadence is not enough. I think what would be regulated is that they MUST open source afther that 3-5 years.

Just as we have with pharma patents, after a protection period it should be free game, and they should open-source if they don't intend to continue pushing updates, say evety 6 months or so.