Because you choose what to run. It doesn’t matter what code *exists*, all that matters is what users use. Greenpeace had a $5M budget to change a small part of the code. It would cost maybe $10 or $20k to do the actual code changing. Getting people to run it, tho? Different story, and $5M, or $5B won’t get users to act against their own self-interest.