I agree.

Playing Devils Advocate it sounds like the options, for them, would be to stop providing a non-paying version entirely.

I understand where they are coming from but providing an open source version that won't get timely security updates feels like it would be more trouble than it's worth to use.

If they only want to work on a version that pays for their time I'd suggest they make the whole thing closed source.