@Gina
I would suggest to start by doing an audit on just how much OSS that one already is using. Both directly and indirectly.
Then realise just how much of a blind user one has been for a long time already.
Now ones own responsibility can be part of the solution too. Because this has also grown in the dark. Quite similar to how funding of important projects has been ignored, instead very much taken advantage of because one could.
So, I'm arguing CoC and funding needs to be solved together.