Given the harm caused by cybercrime, plus the increased police work, governments really ought to make a minimum duration of security updates mandatory.. Phones are already required to meet a raft of various regulations.