The EU realised this like a decade ago, and have had a couple of programs around it that have been small steps in the right direction, but not enough - such as

The EU realised this like a decade ago, and have had a couple of programs around it that have been small steps in the right direction, but not enough - such as EU funder bug bounty programs, giving grants, mandates that the EU should use specific open source tooling for specific needs (e.g. VLC).