So comcast in the USA do it. Unclear how well. Assuming very well, what portion of the consumer market's home connections are covered? In the usa? In the world? This is the general issue beyond today's unpatched bug.

I've had probably at least about 5 routers supplied by 5 different ISPs over the past couple of decades and not one of them has ever got a security update. Is that an usual experience?