Yeah, I'm with you on this. Apple really does have to help, and they're reluctant purely because they know they made a vulnerable device. Helping would make them look bad because it would bring to light that they have the ability to help.
It sounds like they could have made a device that even a firmware update couldn't break, but they didn't. I really don't see how they can refuse. Your analogy is good.