That's not what security updates are. They are fixes for errors in the original software. They are product recalls for dangerous product faults. You can't charge the customer because the product you shipped them was faulty.
The question is can Microsoft extend that support for a cost?
Note they did provide a decade of updates.