I guess what I am getting at is: do companies not want to pay for security of these devices because they only sell for a few months before the next model comes

I guess what I am getting at is: do companies not want to pay for security of these devices because they only sell for a few months before the next model comes out? If that is the case forming a security company doesn't seem like a very profitable venture. Has someone made the equivalent of ruby on rails for these devices? It doesn't work for everything, but for most it works well enough and gets it the job done in a fraction of the time that a complete custom job would require?