A little more related in my opinion is enterprise hardware. I recently started a new career managing software and hardware acquisitions, including their mainten

A little more related in my opinion is enterprise hardware. I recently started a new career managing software and hardware acquisitions, including their maintenance, for a very large organization. When OEM support and maintenance is required by policy, the EOL renders that associated hardware useless unless you're willing to maintain 3rd party maintenance. Which, from my understanding, even patches for vulns such as the recent log4 vuln would not be covered. One could argue that this limitation is created by such organizational policies, I guess, but it makes the whole industry look more like a leasing structure with purchase prices to me.