I think there should be timeframe (eg 2 years) and all versions released within that timeframe get a patch.
Also an option to update to another version than the most current might help users