Why is so much of the web's framework operated through volunteers?

.Malware smuggled in to XZ Utils program highlights a much bigger complication.