@zimzat@mastodon.social I totally hear you on this. It would be great to instead make funding available to squash entire bug classes. I think for a lot of projects, this would be great and I think the right move. I think it boils down to, security costs money and doesn't deliver, "return on investment" in a lot of CEO eyes, so it's not worth investing too much money on. The only thing I can point at right now is that OpenAI gives away some API tokens as donations for open source maintainers: https://openai.com/form/codex-open-source-fund/