It's still early for GitHub's Sponsor feature but I'm a bit surprised this is not part of it already.
- They already understand what kind of code base it is and already do dependency scanning for security issues
- They have payment details
- They have the "verified" payment method of a person / project (If sponsoring is enabled)