They do mean you're locked into a particular vendor and might have to deal with that device not getting updates in the future. However, you can eventually make your own hardware firewall ...
Nor should they be, as the device in charge of a large part of your network's security. But if you've got old PC hardware around, turning it into a custom hardware firewall is significantly more ...