This is why governments need to — and are — stepping in with things loke Cyber Resilience Act in EU.

If this product continues to sell in EU after Dec 2027, they will have an obligation to update.