Thanks to the wonders of capitalism, a bunch of businesses that would have to yield to tyrannical open source devs and their goody-two-shoes mentality can pool their bargaining power and each pay a little to a benevolent clean room reimplementer of security fixes.

Or, they can vendor the library and ask Claude to fix it in-tree 🤷