I in general very much support requiring paying for support. I.e. SLAs with consequences for not meeting targets support.
At least for software/hardware running things that can’t afford indefinite unauthorized access or downtime if left in a vulnerable state. (Some stuff actually can IMHO be like that).
I also think governments should have justify renting software insteading buying it if the money is intended to be an investment of any kind.