I've been using Hugo for some of these reasons for the last 6+ years. The project seems to chug along. They've updated the documentation now and everything is super good there.
And I can choose whether or not to use NPM. I've thought of moving from it a few times. But it's just better and solid.
But the other side to this coin is us having problem making money. It's muddy waters for sure. For example, Manjaro Linux was dragged through the mud after they started their company. Not to mention, On the other hand, just like SSG's like Hugo and 11ty, Netlify and Vercel and others are responsible for a ton of free sites (like mine). They need to not just eat, they should be able make a luxurious life if that's what they want.
I am not against anyone trying to make money off of their OSS projects. We need good companies to make money. I just hope it doesn't become anti-consumers. Which is what the OP's concern is. Can't blame him for thinking this as well.