Tell them it is risk management; funding OSS ensures that projects you depend on will exist as OSS into the future and hopefully have less bugs and security problems.

For example:

https://anonymoushash.vmbrasseur.com/2022/10/27/open-source-...