“In actual supply chains, money is changing hands.”
A supplier has a contract and an invoice. A maintainer who wrote a library for free has neither. Google wants owners of critical software to give up anonymity. Companies want supplier obligations from volunteers they have never paid.