Why not reverse bounty or charge these entitled users for fixes and change requests?
If they want the patch or improvement, they should pay for it.
Log4J CVE might have been the perfect use case for asking for 50K-1M EURO for the maintainers to patch the bug, to any corporate clients this is a drop in the bucket.
Capitalism is just one big extortion racket. Pending to move to fully automated luxury space communism, that's what people need to do to succeed in the economic incentive structure we've created.
If they want the patch or improvement, they should pay for it.
Log4J CVE might have been the perfect use case for asking for 50K-1M EURO for the maintainers to patch the bug, to any corporate clients this is a drop in the bucket.