> What stops a random organization to sponsor these projects which a behind-closed-door deal that also includes bundling third-party code which is used for ads

> What stops a random organization to sponsor these projects which a behind-closed-door deal that also includes bundling third-party code which is used for ads or data collection? This is already a thing, a bunch of roots/bootloader unlocks on Android (kingroot?) install malware and adware.