I can't help but feel open source's responses ultimately don't address the root of the problem. Yeah okay, reverting to 5.4.6 or some version from over 2 years

I can't help but feel open source's responses ultimately don't address the root of the problem. Yeah okay, reverting to 5.4.6 or some version from over 2 years ago might "solve" the immediate problem that is the backdoor, but it's not going to solve anything else. More specifically, I've not heard so much as a rumor that any of the dependents will contribute time and manpower to the project they rely so heavily on. I find it amusing that it was someone from Microsoft, a company reviled by a lot of the open source (and particularly FOSS) community, who brought this problem to light. Producing something needs time and manpower, and time and manpower ultimately are not free (both beer and libre).