Comment by euroderf
Musing...
All these things might need some flavor of escrow-with-indie-verification. For example, does the published source actually compile other what's on the device? And some flavors of escrow (like your #3) need a bankroll or some sort of insurance.
And anyways, given the inevitable enshittification of all the things, including "assurance", how is a grand scheme for preventing willful software obsolescence enforceable by anything less imposing than the gummint?
In my fictional country, the gummint is BDFL-style. Regulation is broadly accepted as the lesser evil, when compared to letting the free market enshittify itself.