Yes that’s about right, buying what you need rather than buying overkill will save money, but the reduce implies that you’re not buying one or buying used. Idk about web security but as long as the software (incl firmware) is getting updated than people who need that extra security can buy new and therefore the most up to date. I would venture to guess that most people will be covered by the numerous other security precautions that are taken and can afford to run older machines with older firmware and that can keep up with their demands.