Sure, but that only applies to devices that aren’t being maintained by someone else, and frankly, it’s not obvious to people who have to maintain their own devices and do a better job, so it’s not clear that there’s any particular argument associated with security here.

Just to be clear, I believe that copyleft compliance is important simply because it is the conditions under which the authors made their code available. I just don’t think the headline is honest.