Why is actually so much of the web's commercial infrastructure operated by volunteers?

.Malware smuggled into XZ Utils program highlights a much bigger trouble.