They pay for updates indefinitely? That's not very sustainable for the business is it? To justify continued investment in backwards compatibility and security patches, a business needs an ongoing source of revenue.

According to whom?