If a company is going to pay for software, they'll expect support as part of that license, and OSS doesn't provide that in most cases. It'll end up with people setting up companies that offer the OSS + support. This is what Chainguard is/does.

Maybe there's a world where Chainguard pays the OSS devs for new versions, but the more likely outcome is that "registry gated" projects just get banned from use by devs, like most companies will do for ones with anti commercial licenses.