“What can you possibly be complaining about!? It was secure when we released it! Maybe you should just buy a new one with less vulnerabilities!”

EU isn’t wrong that people have an intuitive sense that appliances like printers should have a worthwhile lifecycle and for some classes of devices this lifecycle should be quite long. 10 years really isn’t unreasonable.

Also, just like everyone has to support usb-c charging regardless of whatever other proprietary alternative they design… vendors should have to support a couple generic standards (postscript/Ghostscript and CUPS) that relieve a lot of the ongoing maintenance. There are very few/no valid reasons you couldn’t implement cups/postscript if you really want.