They already have a similar law in place for car parts. Manufacturers have to supply them for 10 years. And also 3rd party garages have to be able to buy them.

They already have a similar law in place for car parts. Manufacturers have to supply them for 10 years. And also 3rd party garages have to be able to buy them. And compatible parts from another manufacturer are mostly legal (can't be protected by copyright). Extending something like this to software and security updates is a promising idea.