I made the conscious decision to get a nexus phone so that I would get the updates. When it isn't supported anymore, I'll upgrade. So I do pay for my updates. Apple works the same way - pay more up front, get updates for quite awhile. This is kind of a moot point. If you charged people for an update, would someone be able to sue you if you didn't give them the security updates for free? I bet someone in the US would try it and even if it was thrown out, that's still a lot of extra hassle. I know what to expect when I buy a cheapo phone - nothing.