I think subscriptions are fair if you want updates, which for anything security related you do. The alternative (from decades ago) is to re-buy it every few years.
Someone has to pay for ongoing maintenance.
Someone has to pay for ongoing maintenance.