[semiquaver]

In reality, even if they did recognize the severity of this problem, they likely view the cost to remediate it as prohibitive, as it would involve reworking their whole weird janky system. So better to pretend they don’t have to deal with security.

[necovek]

This is why governments need to — and are — stepping in with things loke Cyber Resilience Act in EU.

If this product continues to sell in EU after Dec 2027, they will have an obligation to update.

[semiquaver]

Easy fix from the company’s point of view: make product lifecycles one year tops.