Because it’s beneficial for the software company’s reputation. People are more likely to buy the software when they know that it’s not going to get a permanently unpatched zero-day the moment the next version comes out.