IMO, that's more of a sad story about the state of respect for supply chain risk management in the software engineering discipline. It may be convenient at first to add a bunch of dependencies for free that solve a particular task, and ignore the part that says "AS IS WITHOUT WARRANTY OF ANY KIND". The only thing a FOSS license gives anyone is code. It never gave anyone maintenance or support.

Any organization that uses software that is "as is" should have a plan to maintain that software themselves, or mitigate the risk in other ways. And many of the large players in this industry do exactly that, and their full-time employees are top contributors to many large FOSS projects.

A great many open source maintainers are employed by a corporation that pays them well, if not fantastically well, for maintaining it. Over time, the trend has been increasingly in that direction.