The whole log4j incident is kinda funny. Isn't it like 1-3 guys that develop it in their free time that don't get any donations from the big companies that use it? I would just walk away at that point tbh.