Hot take: I don't think a useful response to the open source maintenance crisis is 'throw money at people'. One reason is that there's not reliable full time paid work maintaining things for all of the many, many scattered maintainers out there.

The real answer is 'corporations use less open source code', but that's the one answer corporations don't want to hear. (But they're going to be forced into it by eg the EU CRA.)