If the permissionless part isnt attractive to someone, then they can add an issue on the repo and say "trust me i'll pay you".