Comment by kelnos

> if it stops being maintained and the lack of updates makes it fatally insecure or something, it can become effectively obsolete.

Sure, but that won't happen immediately when the maintainer abandons it. It might not happen at all. There's usually going to be plenty of time for a company to switch to an alternative, or even take on maintainership themselves.