FIPS 140 is an indication of how desperate a vendor is to sell to government customers, and indirectly customers tied to government requirements. If you're prepared to set fire to $100K or more then you get your FIPS 140 license-to-sell. So the expiring certs won't make the products any more or less secure than they were before the expiry, it just means you can't get new government sales on those certs but have to set fire to more money to get updated ones.

[flagged]