OSS is dead.
Even Linux - I bet half installs nowadays are on AWS/GCP/etc., and they run custom distros, and one day Debian won’t have enough funding to fix all CVEs, and the only ones which will be constantly viable to run when you have liabilities (=all the time) will be cloud provider-maintained ones.