The complete report (in french) without email wall: https://ttm.sh/it5.pdf

The other report they published on the same day, in partnership with the telecoms regulator (ARCEP), which assesses environmental impact of infrastructure vs end-user devices: https://ttm.sh/itL.pdf

Someone needs to get manufacturers to provide updates for longer, because there's no way I'm compromising my security to save a few grams of carbon.

That's a good point! Personally i think forcing manufacturers to produce software is the wrong answer. Manufacturers should produce detailed documentation (datasheets) of their products so any software vendor can keep them maintained "forever".

That point was abundantly argued at the latest USENIX if that's of interest to you: https://www.usenix.org/conference/osdi21/presentation/fri-ke...