It seems to be getting a little better lately, but historically they just didn’t give firmware updates. I went 3 years without a stable bios update for my 12th gen Intel mainboard on linux despite known vulnerabilities since launch (just got its first update last month).

I actually upgraded my mainboard within that time, so I went the full lifetime of the product with an insecure BIOS and none of the firmware improvements that were promised at launch like thunderbolt 4 certification. For all practical purposes, firmware support ended when it left the factory until just last month.

That said, my new ryzen ai 350 main board just got its first update to patch some vulns that were disclosed a month ago. So still not in time for the coordinated disclosure, but a month is way better than 3 years so I’ll take what I can get.