Why is actually so much of the web's commercial infrastructure run by volunteers?

.Malware smuggled into XZ Utils program highlights a much bigger trouble.