I’d argue security updates are not needed too.

It depends on what the device is used for.

Most security concerns nowadays are from users giving easy access to nefarious people. Usually easy passwords that can be collected from social media.

I’d also argue that corps like Microsoft, Google, Apple etc, can have far more nefarious intentions than some random hacker. Even if it’s just data leaks. There is safety in a crowd. But when corps control the crowd… That’s more of a reason to raise security concerns.