The XZ Utils backdoor, discovered last week, and the Heartbleed security vulnerability ten years ago, share the same ultimate root cause. Both of them, and in fact all critical infrastructure open source projects, should be fixed with the same solution: ensure baseline funding for proper open source maintenance.
The first one was a genuine bug, the second a malicions backdoor. The only common thing is they are both open source projects. I agree with having more oversight and funding on critical open source software, but suggesting that these two vulnerabilities are the same in some way is a bit of a stretch.