[rapnie]

I see it more as both sides taking calculated risk. Developers contributing to a corporate-led OSS project with particular licensing should know that they can be rug-pulled at any time. They benefit during the project and afterwards from a good fork that otherwise wouldn't exist (a healthy fork taking shape or not is additional risk). OpenTofu is a great win for the community.

For the company the risk is that the stronger community they build, the higher the chances of a serious backlash when they rug pull. Weigh the reputation damage, and upon emergence of a good fork having a serious competitor, to the benefits of community contributions.

Don't want to be rug pulled? Choose community-led projects with good governance and copyleft licensing to contribute to.