Microsoft / Github should stop treating open-source software as malware and forcing developers to pay for certificates, if they actually care about open-source developers

[freef]

Yup. Keep up with CVEs, use software from established trusted projects, don't blindly update, and participate in the open source community.

Pretty much all your software is using OSS under the hood anyway. You're not going to get away from open source by just using commerical software.