JayG30:
We have mechanisms capable of addressing security issues if a major vulnerability in a commerical module surfaces that we feel needs to get out to everyone.
Andrew addressed EPM above.
Sysadmin Pro is the same a Sysadmin with some advanced features enabled if you get the pro version. Sysadmin is also the module that is required to interoperate with the licensing system as well as other fundamental capabilities it provides to both commercial modules and some Open Source modules such as firewall. As such, in its current state there is no renewal needed for it and you will continue to be able to get updates for it since everything else depends on it.
On your point 4, if you are referring to outside bugs that break an exisitng commercial module, as already addressed, such bugs are almost always a bug in the source outside of the commecial module and as such are fixed there, not in the commercial module. If you're referring to releasing a new commecial module version that introduces a bug, that is always possible, software has bugs, in all industries. We try hard to test and avoid them but they do occur. As I've indicated elsewhere, this is not a "change" as the license has always only included 1 year of updates, consistent with lots of software. In many cases with other licenses, you can't even get support after a few months. We tie both the renewals and support access to the renewal license so we don't create that restriction.
You are right that there will be some impact on people not downloading the new modules. Given our stats and the general industry trend, we don't anticpate this changing substantially. There are many people who don't run the latest simply because "if it isn't broken, don't fix it" mentalities or they are just too busy and the PBX is sitting in a closet. This isn't going to change anything for that contingent. There are also many people who do upgrade whether to keep current, get new features, etc. And what's common to everyone is an expectation of strong commercial / mission critical support of the commerical module base and the FreePBX Open Source base that it runs on. This ensures that we can deliver on that and it's why it's always been part of the licensing.