That whitepaper is for management and purchasing. The security patches are for the poor sysops who have to look after the mess left behind by the former. Every

That whitepaper is for management and purchasing. The security patches are for the poor sysops who have to look after the mess left behind by the former. Every large commercial software company is just as bad. It was only a few years ago that Microsoft were doing the same, until they realised they could monetize open source software themselves[1] as well and decided to stop the badmouthing. [1] through azure and buying into major open source ecosystems to gain mindshare.