So your suggestion is to pass the buck onto "vendors"? Who are they and what can they do about it? Think outside the box!
Vendors don't prioritize updates because their customers don't understand enough to make this part of their purchasing decision, so there is little incentive for them to spend resources on it.
Minimizing this major problem doesn't help.
And - instead of saying 'think outside the box' - why not actually contribute some out of the box thinking?