Why is so much of the net's framework run by volunteers?

.Malware smuggled right into XZ Utils program highlights a bigger problem.