100% true. And, honestly, one of the secrets to @nodejs.org's longevity is that we exactly built resilience to this into the governance. No single company can represent more than 1/3 of the TSC for instance. It's never perfect but with effort companies can participate rather than dominate.
Some companies openly hire people to "foster influence across open-source, enterprise, and partner communities." Or some other companies openly look for people who "hold positions of influence in open-source projects and organizations." notes.brunopedro.com/2026/09/18/2...