In EU, Cyber Resilience Act requires automatic updates, so the second point is moot.

Most owners want just plug and play, so it makes sense.

Even third point is pretty moot. We don't do that for hardware, why for software... A component is no longer manufactured? Tough luck, hopefully you stockpiled it.