For devices that are connected to internet it should be a best practice at least and probably an obligation to open source the firmware / code that drives the object when the company decides it wants to stop providing security updates.