If they say security updates for 10 years and there are unpatched security vulnerabilities living in the device before that I think they should have to refund the purchase.