Why do you assume Open Source is really any better?
Have you seen the absurd number of 'Go download the latest version of this dep from some 3rd party remote host' steps in the build processes of modern software (oss or not)? Or my favorite 'Just use this image we pushed to dockerhub as your startingpoint for building our software'.