Or they could, just not be dicks and supply firmware updates without the lock-in, instead of having to trade off security.