So why else do we pay someone to package and certify/verify open source projects? This is absolutely 90++% of what should be RedHats core day job.
You pay red hat for compliance reasons (availability of a support you'll never call, mostly).
You may, have you heard of docker?