Well whaddaya know, you get what you pay for.

That being said, companies should be legally obligated to provide security patches for a minimum number of years.