Why is actually so much of the net's framework run by volunteers?

.Malware smuggled right into XZ Utils program highlights a larger issue.