Empty words. Without changes to anti-circumvention laws, safe harbor commitments for security researchers and serious funding for foss projects nothing is going to change.
Besides, supply chain payments are already a thing and help maintainers like myself already while providing security benefits for corporations.
this is a sure way for grifters to make a boatload of money by lobbying for various projects to be funded.