The cost isn’t that high. They’re already doing it for a bunch of parallel systems.

In a just world they’d be legally required to provide the fixes, or fully refund the entire platform cost. It’s not remotely ethical to allow this to exist unpatched anywhere, regardless of support life.