Many companies large and small already pay penetration testers to try into break into their Linux-based servers on a regular basis.

I was personally involved in a case where a recognizable brand's pen testing effort lead to a fix a well-used piece of open source software.

There is a lot of open source is already being fixed thanks to commercial interests.