@warriorstar try tagging them i know they have fedi accounts here @fsf and here on GNU Social https://status.fsf.org/

Personally I think the very idea of something being Free and Open addresses the issue pretty well. Yes it would be nice to give the devs more money. But very idea of free kind of puts money on the back burner. MS doesn't support Windows 7 anymore and there are way more versions of that laying around the Internet than Log4j and they aren't taking crap.