[logn]

It's prudent to have a CLA anyhow. Even if a whole project were AGPL, an employer of some contributor could claim ownership and IP theft.

And the right to fork a project also means the right to put conditions on accepting contributions.

And there are more advantages than publicity and free demo, namely that users have freedom to run the app themselves, find another service provider, find another project maintainer, etc. I'd see it as a far less risky situation than anything proprietary. Compared to Apache/BSD/MIT it's less risky in the sense that people aren't going to be introducing proprietary forks.