Well the easiest way to give people secure systems is to ensure that they are able to change the software themselves. So just require 90 days prior to end of support, that the manufacturers publish information that would allow independent their parties to build, install and run their own custom work on those systems. Basic hardware documentation goes a very long way with the Open Source community and without it we would only be able to support systems that the FSF community reverse engineers.

It is that lack of information, which prevents hardware drivers from entering the Linux Kernel main tree; which along with Tivoization are the leading drivers of e-waste and unsecured systems.