computer networking hardware which will eventually be outdated and no longer get security updates

I don’t think that means that the correct approach is for the manufacturer to build in obsolescence. Sometimes the security threats don’t matter to some users, so they should be allowed to accept the risk and keep using the item. Or, there could be a rule in place that if the company no longer wants to maintain something, it is required to release the source to maintain it.