I have to imagine that every company will say that there is no plan to offer security patches and updates, for liability reasons, and that very few users will care. I personally think that botnets of IoT devices are terrible, and wish that I had a useful suggestion for getting rid of them, but it's tough to combat end-user apathy.