Really. Given most open-source is being hosted from Github which is controlled by Microsoft, I'd say this is a risk to open source projects.

Tornado Cash is a good example of this risk.