I'd say if you take software that doesn't cost you anything, either

(1) you carry the risk or

(2) find someone that operates the software for you (on premise or SaaS) and they may also carry the risk for the premium you pay them.