But then you’ll no longer receive any future security fixes by the publisher.

It’s a hard problem to fix, when we can’t trust any publishers in the future :(