Comment by aeternum
Auto-applying security updates is actually a major threat vector. It's often easier to compromise a cloud deployment system/key rather than thousands of edge-deployed devices.
An EOL device that has withstood the test of time, and has had many security patches but is no longer connected if often one of the most secure devices.