One of the challenges is this - on one hand, we have the "IoT is notoriously insecure and manufacturers have or should have liability" argument, which is valid, and when manufacturers do actually release security updates, that should be lauded.

And then on the other we have the usability pain like this. I'd rather pay a few dollars more for more storage or an A/B firmware system so the upgrade can run async and minimize interruption.