I think incidents such as this will wake organizations up to the reality that open source is not inherently more secure or cost effective than proprietary softw

I think incidents such as this will wake organizations up to the reality that open source is not inherently more secure or cost effective than proprietary software. For the past 10 years the prevailing wisdom has been that one should not "re-invent the wheel", but we're starting to see the dangers of not owning the full stack. As a professional software developer working for a major company, I'm much more inclined to implement something myself rather than pull in a bunch transitive dependencies, that introduce unknown and hard to manage risks. 10 years ago I would have laughed at someone who suggested such a thing. The argument has always been that closed source can't be inspected and as such is more risky, but I think in the current landscape as open source developers get more ideological, commercial incentives are a better way to protect against supply chain risks than open source code.