This is why permissive licensing isn't good enough; copyleft is essential. (And not just GPLv2 copyleft, but copyleft with anti-tivoization and cloud loophole protection as well, such as AGPLv3.) Every part of the system -- the tech itself, the management, and the legal/business structure -- has to be designed to resist being subverted against the user.