And yet, there are plenty of products which never expire. Petzl says their plastic and textile products have a lifespan of 10 years, while their metal products (which I regularly trust my life to) never expire.
https://www.petzl.com/US/en/Sport/FAQ/what-is-the-lifetime-o...
There are newer (government or industry) safety standards, as you note, which might reasonably cause one to retire functioning equipment. (For example, retiring dual-action carabiners in favor of triple-action carabiners.) But that's not because there's anything wrong with the equipment. Just because 2020 gear is a bit safer doesn't mean 2010 gear was dangerous. 2010 wasn't that long ago. Those safety standards were already quite good.
Besides, that's not what's causing software like this to need an expiration date. IOT devices where the server gets shut down are not going dark because of some new security research. We as an industry knew full well that using "password" as the password was a terrible practice, even way back in 2010.