I in general very much support requiring paying for support. I.e. SLAs with consequences for not meeting targets support.

At least for software/hardware running things that can’t afford indefinite unauthorized access or downtime if left in a vulnerable state. (Some stuff actually can IMHO be like that).

I also think governments should have justify renting software insteading buying it if the money is intended to be an investment of any kind.