I think from an exposure point of view, I'm less likely to worry about the software side of my physical security being exploited that the actual hardware side.

I think from an exposure point of view, I'm less likely to worry about the software side of my physical security being exploited that the actual hardware side. None of the points you make are relevant since I have yet to see any software based entry product whose software security can be concidered more than lackluster at best, maybe your company is better since you didn't mention a name I can't say otherwise. What I'm saying is your customers are more likely to have their doors physically broken than remotely opened by software and you are here on about life and death because of a vuln in xz? If your companies market cap is as high as you say and they are as security aware as you say why aren't they employing security researchers and actively on the forefront of finding vulns and reporting them? That would get them an invite to the party.