To clarify my personal position. There’s no hard obligation for corporations to contribute back to FOSS. I would rather have them contribute back, than give nothing at all.
This would be a broader scope than just defense, but any entity which has had a [potentially] “dark past or present” ethically. E.g. Nestle, Bayer, Monsanto, facebook, google, etc.
People and corporations should be incentivized to the do the right thing. Pushing them away from contributing seems to hurt both Nix and their desire to do better.
This is what the companies get in return when buying sponsorships. Awareness.