Comment by chrysoprace

In that case the maintainer needs to have some self-restraint and accept that they don't owe them anything. If somebody depends on the maintainer's package for a critical component then they should consider paying them and possibly drawing up an explicit contract. That's what we did at my work for a critical open source component, where we paid the maintainer to add several features we needed.