Why is so much of the web's commercial infrastructure managed by volunteers?

.Malware smuggled in to XZ Utils software application highlights a greater problem.