Isn’t this the healthcare argument but for security? Because it becomes an international problem when millions of EOL’d devices have a wormable flaw and can send enormous DDoS traffic stressing networks and taking sites offline?
Wouldn’t that be more of a problem if security is standardized though? If everyone has the same security, the same flaw makes everyone vulnerable. Multiple competing security types diversify the pool and prevent one flaw from causing all devices being susceptible to the same attack.
I fail to see how standardizing how long products are supported and how vulnerability reports are processed would cause everyone to have less security.
