If he doesn’t wanna spend and invest, absolutely fine, nobody is forcing him to.
He will spend as little as possible because it is a freeware product. Spending as close to $0 is an appropriate financial model for that category of product.
If he wants his software to stay relevant in a dynamic world, then he will spend whatever he has to spend and will find a way to ensure revenue stream.
Melih said he has no intention of creating a revenue stream from Comodo. He said that years ago. It's buried on his thread in the Comodo forum.
He paid for the creation of CIS\CFW and a long time ago he said that is what he is willing to do, but to expend the resources to make it a refined, highly-polished product - that he is not willing to do. Why? Because it would be very expensive to do so.
He also said is has no interest nor intent to sell Comodo. He offers what he is willing to offer and users\people can accept that or just do not use it.
And also, if he doesn’t wanna have his company expensed, then why all the smoke and mirrors? We will release 2025, we will fix bugs… why lie to the users?
"We will fix bugs" is not the same as "We will fix
all the bugs."
On the Comodo forum, Melih's response to all the criticisms is "I am OK with bugs. Software has bugs."
Again, since the product has $0 revenue, the owner is going to spend as close to $0 possible.
I fail to understand your logic. The company behind Comodo is a large company.
Comodo does have large revenue, but it is not derived from the Comodo software.
Offering a free product does not mean they should not invest in it.
The correct business model for software is that the resources spent on that software are directly proportional to the amount of revenue it brings into an organization. That
is how the software industry works.
For every 4 software engineers that I hire to develop & support a software, that software needs to generate $1,200,000 USD in revenue. If it does not, then I do not hire anyone and the software receives the most minimal support.
All software should be managed as its own profit center. Since Comodo generates $0 revenue, it "earns" minimal product support.
The bugs cause system issues. Unpatched vulnerabilities are a security risk. Leaving those unpatched and unfixed, especially by a security company, is pure irresponsibility.
All software is developed and offered "As Is." Read any software EULA and you will see the same thing in every single one of them - "This product is sold "As Is" and you, the user, are responsible for what you do with it and on your system." Kaspersky, Bitdefender, Norton, Avast, ......... they all say the same thing in their EULA.
Comodo has no obligation or responsibility - legal, ethical, moral, or otherwise - to anybody - to fix a freeware's bugs.
Should there be a provable security vulnerability then Melih has had them fixed over the years. The issue here at MT is there are members that categorize any bug as a vulnerability and that is not realistic.
Let's hope he'll learn how to land this time from an expert! 
