A backdoor could be introduced at any time by a software update.

Cutting off updates would leave devices insecure.

Do some devices not have remote disabling as a security feature?

A lot of devices and software store or backup to cloud servers.