Why is actually a lot of the web's commercial infrastructure run by volunteers?

.Malware smuggled in to XZ Utils program highlights a larger concern.