I'd go further and say that, for general purpose computing devices, it should be possible to fully use, repair and repurpose it without contacting the vendor ever again.

That is, bootloader locking and remote attestation should be forbidden by law.