device makers should be forced to support their devices and if they don't they must have something like 6 month period where if they don't push a security check flag to their devices they initiate code to nag the user telling them this devices is not secure anymore because manufacture is not supporting it anymore, in this case they should also be forced to release way to load 3rd party code etc to allow others to fix their crap.
This is a serious issue because many people use old devices without knowing anything is wrong.