@Gina
I didn't know of the situations, both Framework's and Hyprland's, until yesterday.
While short term sponsors need to make better due diligence. Long term this needs to be addressed at a higher shared level that also OSS orgs, projects and companies pledge to.
Just imagine the situation for Linux distros, spanning thousands of individual OSS projects. They are in a way sponsoring those, as they include them in their officially released versions and as add-on packages they make available.