[wright-goes]

I understand where you're going with performance and feature updates, but what about security updates? Those are often flaws that were present at time of shipping.

If I buy a physical lock that's found to be easily opened with a toothpick once it's in the mass market, I'd expect a recall and it to be fixed. With software, it's even easier to deploy a fix.

There's an expectation that purchased software is usable. A server that's connected to the internet that can be compromised easily is no longer usable. Firms selling software applications have an obligation to provide security updates for the life of the product.