@khinsen @johannab
Indeed. And we see what the result is. After various supply chain attacks and whole range of other software supply line related issues that typically are not well handled in most #FOSS projects, the 'market' (need not be commercial clients per se) start demanding all kinds of quality compliance guarantees.
In the new and upcoming #HorizonEurope grant programs by @EUCommission I heard - there was much discussion about this - on changing nature of #NGI0 #grants as provided by @nlnet whereby the #EU mandate shifts towards placing bigger focus on these concerns.
Though I admit that I'm not fully in the loop, and neither do I know if things were already all clearly communicated to the public. Perhaps @michiel or someone else at #NLnet might point to the most relevant info resource atm.
Other than that, the misunderstandings which lead to perceived #entitlement (client/customer) or #privilege (creator/devs) are expectation mismatch, solvable by better comms practices.