Minimum life..
Microsoft maintains product for far longer than, say, Google (running at 3 years for fondleslabs, less for phones?) or Samsung (no updates issued ever). Of course, they need to...
The danger with a minimum life, though, is that it becomes a kill switch, but that can be legislated too.
And no, Microsoft should be under no obligation to release fixes to cheapskates that it has developed for paid customers. There are surely many more critical fixes that it has for paid customers that also aren't released.