Elsewhere I've agreed with exactly this. The regulators will inevitably take action on this, and they should, but it's up to us to influence that outcome towar

Elsewhere I've agreed with exactly this. The regulators will inevitably take action on this, and they should, but it's up to us to influence that outcome toward open devices. The device should either be pre-EOL with a process for security review or fully open or both. We want the company to take primary responsibility for the products they sell, obviously.