Companies are not unaccountable entities. They're headed by people who make and carry out these decisions. And withholding security updates as a means of planned obsolescence is absolutely a consciously directed strategy. In many ways companies act as too much of a shield for bad behavior. When a "company" does something awful, it's not the company - but the executive leadership doing that.