Two of the “questions” are just statements
Unpaid Open Source developers will have trouble fulfilling increasing government requirements, for example the EU Cyber Security Act.
Emerging companies like Tidelift, which pay developers, will solve the current problems of Open Source.
I reckon that requires a legislative solution, not just a technological one.