While it is certainly nice to have continued support, I think I’d disagree that forcing companies to maintain software on legacy/outdated hardware is something that should be legislated. I think that would greatly stifle innovation in a lot of cases.

I’d be a supporter of something like @Emerald_Earth@lemmy.world’s suggestion, though. If they are no longer able to support security updates, then they should open it up to be able to maintain it yourself/community-maintainable. Expecting a company to maintain support through continued development on a 10 or 20 year old device that in some cases may not even be physically able to handle the updates is a big ask.