Devices that connect to the Internet need continuous updates to not become vulnerable to attacks. At some point it's perfectly reasonable to end of life a product, and I think over a decade of supporting a computer is reasonable.

Also, they aren't bricking these thermostats. You can still use them locally.