We sort of limp along with corporate cooperation on key technologies. Unfortunately, there are a number of places uncomfortably controlled/owned by single organizations. Think things like the npm repository.

I wonder if something like a NIH style grant system would make sense to keep opensource software funded and supported without needing corporate support. I have xz on the mind. Would that have fallen under the control of a bad actor if the original maintainer (or others) had the financial ability to dedicate their time to it's maintenance? Who knows.