Re: Yeah but...
They do have a EULA that states that they aren't liable for a breach, more or less. It's the same standard legal boilerplate that everyone else uses in that regard.
I'm assuming you mean this:
https://support.pulsesecure.net/product-service-policies/eula/
However, they *do* send out notifications about updates to companies that have support agreements in place with them for upgrades; It's still on the company that purchased the product to download and install said updates.
The beef I have with them is that you *must* have an active support contract to download updates, even critical ones like the one mentioned in the article.