I do not know how men and women would make use of a library as substantial as log4j and not hassle taking a look at what is in the box, and the things they need to help/disable. Blaming it within the opensource product or service seems Unusual after you grabbed https://prohactive.com