If security flaw is so egregious as to warrant a patch, then the patch should be considered to be a fix of a defective product and free. If the situation doesn

If security flaw is so egregious as to warrant a patch, then the patch should be considered to be a fix of a defective product and free. If the situation doesn't rise to that level of severity, then it follows that a patch isn't necessary. If GM were to offer lock cylinder replacements because their original cylinders were so flawed as to warrant them, then yes the cylinder replacements should be free. The sold product was not as described. If the original cylinders aren't so flawed as to warrant a replacement, then no cylinder replacement would be offered. Are GM cylinder replacements being offered? If not, then your analogy isn't analogous.