That's a bad take and you know it. HashiCorp couldn't make money because their enterprise offering was slim on features and overpriced. Rather than compete, they're playing protect-the-castle with some aggressive plays to keep their company afloat. They're bad stewards of open source (always have been) and are now getting their just desserts.

You can say the same about MariaDB, Elasticsearch, CocroachDB etc.

Why is „AWS attacks OSS” bad and „Spacelift attacks OSS” good ?

Its exactly the same case just size of companies is different.