This matches my intuition almost exactly.
Especially the distinction between: paying once to own a version vs paying for an ongoing service.
I think a lot of conflict comes from companies blurring that line after users have already built habits and trust.
The point about security updates vs feature updates is interesting too — that gray area is where many products struggle to be explicit.