[fostware]

I liked the old Cisco where if there was a sufficiently high CVE, you could call TAC and have your long-passed (or retired but now running the home network) device get the latest security patch in that train. Better for the internet as a whole, to have patches available.

Now all the vendors hide their severe CVE fixes behind the maintenance contract. I get putting new feature branches behind the contracts, but in the meantime, it'll be their name in the news when the equipment gets exploited.