I know [edit: guessing] you're not being serious, but until there are laws mandating this in given markets, the security risks will ALWAYS be unknowingly carried by the consumer. In a hypothetical world where a manufacturer differentiates by advertising a product as "Now with security updates guarenteed for 10 years!" consumers will suddenly realise they've been sold garbage until that point. It just won't happen.

Without a promised based on source code escrow, it's just not worth anything to me. I VERY much support this sort of thing, though.

Or for that matter: any digital device that is not a computer or a mobile phone.

When was the last time you applied a security update for your networked printer? I'm guessing never, because no printer vendor has a security department, none have security updates, etc...

This is why smart networked printers are where state-sponsored attackers like the NSA like to hide their persistent malware...

They can be, but like phones the manufacturers often at best keep up with fixes/upgrades for a year or so after release after which they only care about newer products unless there is a really embarrassing security problem.

They are rarely updated

They won't, because the manufacturers aren't bothered about it.

"Oh, there's a critical security hole in one of our products? Sorry, it's discontinued, buy a new one to fix it." So frustrating.