This is what happened with the Qt app dev framework. The Qt Company delayed releases of LTS updates to non-paying users by 1 year, while not properly dealing with the steady stream of regressions that were affecting normal releases. I quit Qt development partially because I felt that I was dealing with forever-beta software.

But actually, with Qt you do have KDE devs who push their own patches which does help deal with the flaws in the upstream project.

In the Android world, they need more devs doing the same and supporting projects like GrapheneOS with security testing/hardening.