Comment by Wowfunhappy

This all strikes me as overwhelmingly reasonable, and in fact I think security patches ought to be mandated for at least ten years.

Such a law would likely affect Android phone manufacturers much more than Apple, however.