The Sovereign Tech Agency is doing a great job, I hope other countries will follow Germany's example and fund similar agencies. If we want to rely on Open Source software, we need to pay for maintenance.
Believe, the US government runs biggest such fund viz. https://opentech.fund/ (WireGuard & Tor being some of the past grantees).