This is the case for pretty much every open source project. See eg. Openssl. Since open source can be used for free, there is very little incentive to change t

This is the case for pretty much every open source project. See eg. Openssl. Since open source can be used for free, there is very little incentive to change the current situation. And with non copy left licences it can be even worse. The only realistic way to fix these problems I can imagine is to force companies to use paid distros, and let these companies hire developers. But it has been historically hard to make people pay for distro support. Red Hat and Suse were successful, but they never got big enough. It's too easy to use their products for free, or use alternatives like Debian.