Hacker News Reader

I think his advice is to purchase a licensed product with a paid support package if you need an SLA.

In my experience licensed products with paid support packages aren't any more secure, they just let you pass the buck when things go wrong.

To some extent, they also come with warranties and insurance policies that could potentially be collected upon if there are damages.

But yes, a lot of it is a legal CYA, which is important.