>Should they be forced to allow that but still held accountable when their device is noncompliant?

no, because there's this weird concept that seems to be foreign to the modern software folk - Ownership.

Owner is held liable for that, not device manufacturer.