If anything, I think commercial is much riskier to have as a core dependency - they can unilaterally change the deal on you, and if they decide to stop supporting your use case, you’re completely SOL (I’ve had a couple of very close calls with this). With open source, you can keep it running yourself, because you have the source, and you always have the option to patch it.