Why is so much of the web's framework managed by volunteers?

.Malware smuggled into XZ Utils software program highlights a bigger concern.