You cannot make any moral assumptions here because the whole point of many of these open-source projects is that people can use them freely, with no obligation - moral, or otherwise - to contribute back.
> should be a free marketplace, like how regular GNU/Linux package repositories have worked for decades.
Yup, this'll end beautifully. It won't devolve into a malware-ridden mess that destroys the privacy and security of users. The users that pay for a curated ecosystem and idiot-proof privacy/security.
Package repositories might be great for the HN crowd. But I think it's fairly blind to think it won't harm Apple's target audience.