I think a convenience tax model is all that is left.

Everything we do at Caution is FOSS right down to our website and frontend.

People pay us because we maintain an obsessively strict security model of code review, code signing, full source bootstrapping, and trusting no single human or machine. For any of our customers to hold those standards they would need to hire a minimum of 3 experienced systems/security engineers, and paying a subscription to us is a way cheaper option.

If you want people to pay you, even for open source, you need to provide support and value no AI can match.