Personally I think the very idea of something being Free and Open addresses the issue pretty well. Yes it would be nice to give the devs more money. But very idea of free kind of puts money on the back burner. MS doesn't support Windows 7 anymore and there are way more versions of that laying around the Internet than Log4j and they aren't taking crap.
"I appreciate SDF but it's a general-purpose server and the name doesn't make it obvious that it's about art." - Eugen Rochko