Government shouldn't abuse the security update mechanism for offensive measures which actually weaken security.
Manufacturers are not going to deliver the solution.
Manufacturers should distinguish between security updates and other updates.
Without a proper process for security updates the only solution is to throw out and replace the device once a vulnerability is discovered.
It is therefore increasingly important to remedy vulnerabilities quickly. Our process of updating could use an update.