I agree with you technically, but on a whole I feel the urge to resist.
First because it’s planned obsolescence 2.0: the producers of any object will simply issue a PR “we won’t provide any more OTA patches for your mobile/fridge/AC/kid’s toy/pacemaker” and our houses will be full of time bombs.
Second because there’s a very low incentive for anyone to invest time and effort for attacks that target just a few thousands (?) windows phone devices worldwide.