I'd rather expect that the access vectors get noticed and applied by criminals en masse.
Every networked product should come with a legally binding A4/letter-sized sheet that clearly shows the last date the product is guaranteed to receive security patches. Not fulfilling the requirements would have to result in a buyback with the sum directly proportional to whatever time of the promised lifetime is left unused.
EU countries already have rather strict consumer protection laws but they really haven't been designed for situations where a hardware product can be rendered unusable by insecure software.
That is definitely covered by the standard 2 year warranty as insecurity (when security is expected) is seen as defect. If they don't fix it you get your money back. I successfully got my money back for several phones after 1 to 1.5 years.
We can’t win the ok battle any more as no one up top gives a shit clearly.
We're going full speed into totality. It was absolutely the same when the communist regime started in my home country: People were saying they would not use their new powers against ordinary people and that seizing all farmland would be impractical and then after few years of silence KGB and gulags and executions happened (our local alternatives of course).
After paying £27k+ in tuition fees grad priority is earning so the government chased them off too.
I'm not for a moment suggesting this is right for ref. Individual merit is much more important.
That's the reason to battle, not the reason you lost before you even did that.