I’m not an IT expert, so I don’t know how feasible this is, but they should have at least two branches of updates. One that is strictly security and the other that are all the bells and whistles. I would love to stick with an old os if it’s not vulnerable to the outside world.
It doesn’t need security updates if it doesn’t connect to the Internet*, and most of these things really shouldn’t need to anyway.
I just recently returned some smart outlets that would only work with my local Home Assistant if my Internet was up, because it all went through some cloud server. Now I’m using a combination of Zigbee and Z-Wave devices, which all connect to a local hub I have on battery backup. Now everything keeps working even if my power and Internet go out.
*Caveat: Wireless protocols could need updating too, but at least nobody’s going to recruit my Zigbee devices into a botnet. Worst case my neighbor figures out how to turn my lights on and off.