Why is so much of the web's commercial infrastructure managed by volunteers?

.Malware smuggled right into XZ Utils program highlights a larger issue.