If I'm a dude in my workshop making children's toys, I'm on the hook for strict product liability the rest of my life in I made dangerous toys.
I'm not sure this is strictly true. Stanards change over time and old toys might not meet the new standards. Sometimes product recalls occur, other times the change is so broad and insignificant an advisory may be issued or no advisory is necessary.
Point being it isn't always so clear-cut.
With software and hardware it is possible for new vulnerabilities to be discovered as new attack methods are developed.
Also, forever could be too strong. No one is going to complain about vulnerabilities in token-ring network protocols.
I'm not sure this is strictly true. Stanards change over time and old toys might not meet the new standards. Sometimes product recalls occur, other times the change is so broad and insignificant an advisory may be issued or no advisory is necessary.
Point being it isn't always so clear-cut.
With software and hardware it is possible for new vulnerabilities to be discovered as new attack methods are developed.
Also, forever could be too strong. No one is going to complain about vulnerabilities in token-ring network protocols.