That's not a reasonable requirement, it's just that there is no consequence for people administrating (installing, maintaining) systems and the software writers

That's not a reasonable requirement, it's just that there is no consequence for people administrating (installing, maintaining) systems and the software writers. If fines were involved, how long do you guess would it take for people to stop writing in C or system integrator setting up random software. Critical systems may only use software written and certified years ago, not be constantly updated.