There is already implicit political control. If the US wants to ban X, or forbid encryption, it will impact almost everyone on the planet. Much less so if it were Afghanistan, of course.
The EU has a funs that donates money and runs bug bounty programs for critical FOSS software it uses. It should be expanded to include more underlying libraries and lower-level projects, but it's a pretty good start and doesn't come with strings attached.