I'll counter with "Why aren't you paying your subscription for your BMW's heated seats?"

Fact is, there's a lot of "unnecessary" and innovation-deterring in the "own nothing; subscribe to everything" model you're espousing.

On the flip-side, yes, we do love being paid to continue doing our thing.

So. It's a balance.

That is not what GP is suggesting.

The equivalent comparison would be expecting BMW to update your car after you have already bought it. It is perfectly reasonable that once you have bought the car, any updated parts have to be bought and installed separately.

But if you don't want to pay for that, your car works as before. That's what the GP is suggesting.

Kinda. I think the prevailing sentiment is more of a manufacturer recall where BMW has realized a flaw that leads to a safety issue or a critical functionality and issues a recall to resolve it.

Unfortunately that often also includes security updates, which are a horrible idea to skip.

Yes, security is important. Either the developer/company is benevolent or incentivized to provide security patches for free, or they may offer a paid security update package. The US Govt was paying for patches to XP for many years: https://time.com/3935855/us-navy-microsoft-windows-xp/