Why is actually a lot of the web's commercial infrastructure managed through volunteers?

.Malware smuggled into XZ Utils program highlights a larger issue.