No, they bought a device that was secure, or least supposed to be. They didn't do anything to change that. If a flaw is discovered now that existed back then it should be addressed to recover to that state again.

Let's be honest: Apple is making money selling new hardware, so they have no incentive to provide support over a long period of time that does not generate new revenue. Nothing more, nothing less.