"What if the vendor goes out of business without warning?"

I think the open source equivalent is: "What if this library stops being maintained"

Which I have encountered multiple times. Having the source code is useful, but most people don't have the time to add another open source library to the code that they need to maintain.