> pick a better platform
Unfortunately there isn't all that much competition in this space. The choice was try building on quicksand, or let the idea die. I'm glad we tried it.
Until there are consequences for building on quicksand, the vendors have no reason to improve their offerings.
I don't understand what are you trying to imply here? That we should be punished for building a prototype? Or that had we shipped it in its current state, upstream vendor should be punished for stalling on updates?
You're building on quicksand, and you're asking for us to give you leeway when the building collapses.
Either do the work of making all of those security fixes yourself, or pick a better platform to build on top of.