I think once they make a citation, they can't just instantly undo, because that could be a sign of bribing your way out of a ticket, so the next opportunity to reverse course on that is at court.
Can any cops or lawyers confirm? I'm definitely not an expert.
Having given this a lot of thought, regulation is important and devices going out of support should open up their source, but ISPs are the chokepoint and should be both supported and motivated to enforce security measures to protect the rest of the internet from the botnets that are being operated from their networks. There is no perfect solution, but I think that's a start.