That's a disturbing, but interesting, thought. I wonder how often this has played out. Might be worth considering explicitly in a risk assessment of OSS-centric startups.