For an economically rational actor, they'd have to compare the costs of the hotfix (not free) and the costs of writing it themselves (takes at least some amount

For an economically rational actor, they'd have to compare the costs of the hotfix (not free) and the costs of writing it themselves (takes at least some amount of dev time, which costs money). Unless of course there is some other open source dev who makes their patch available for free.