End-of-support wireless access points remain in city lobby SSIDs and no longer receive security patches. Which lifecycle action is most appropriate?

Lifecycle management of network components requires retiring or isolating end-of-support devices that cannot receive security updates. Unpatchable access points in public areas present ongoing vulnerability exposure. Coverage metrics alone do not justify retaining unsupported security-relevant infrastructure on production SSIDs.