By your definition no closed source company can act responsibly. If that is your definition, they indeed don’t act responsibly, my point is that they appear to ship security updates for at least a decade after the device got released, which seems pretty decent. And they have a good record on quickly responding to any security issues and keeping everything up to date.

So they’re doing pretty good. Would it be nice if they go open source? for sure, but for a closed source system, it’s currently doing great.