We should insist that telco provided equipment is held to a MUCH higher standard of security, because we are paying the telco an ongoing revenue stream.
Right now, I admire the companies who DO provide security updates for free.