It's not like everyone buys it on the same day, and never buys anything else from them. If they don't fix security issues new customers will refuse to buy the product.

Besides in the old days you could still buy a "maintenance" agreement for your product, which entitled you to x months of upgrades. You would still own the licence, though.