Why is so much of the web's commercial infrastructure managed by volunteers?

.Malware smuggled into XZ Utils software highlights a larger concern.