Log4j, Faker and Black Swan Events

I don't think that we should change the industry over two events that really are 'black swan' events. However I do think OSS developers don't get paid enough. Faker isn't the reason, it's just a contributing factor.