No, not at all ! It can only be the case of the maintaining entity is the one that sells support. That's actually the definition of commercial software!
It may be the case for company-backed FOSS projects (that use FOSS as a marketing channel and have a business model around it). You might be used to that because Redhat, Elastic, Mongo, ...
But for very large number of FOSS projects, that's not the case. Either there is no paid support, or it is done by a third-party. But then this third party doesn't call the shots what's deprecated and what's backported where.
I was under the impression that OpenSSL is a community project, and now it appears that that's not the case.
It may be the case for company-backed FOSS projects (that use FOSS as a marketing channel and have a business model around it). You might be used to that because Redhat, Elastic, Mongo, ...
But for very large number of FOSS projects, that's not the case. Either there is no paid support, or it is done by a third-party. But then this third party doesn't call the shots what's deprecated and what's backported where.
I was under the impression that OpenSSL is a community project, and now it appears that that's not the case.