“Anyway, gifts will not get you 24-hour guaranteed response times to security incidents.”
Free software is a gift. Companies built their products on it and then got angry when a gift had a hole in it, like Log4j. A gift doesn’t come with a support contract. If you want guarantees, pay someone and call it a contract. Yelling at volunteers only means fewer of them show up next time.