stuff like this needs to become illegal in the licenses. Once something like this is found we can demand and prosecute.
BSD license is the one allowing this?
Also we need special security / firewalls checking holes and other potential security issues. Several institution will take turns randomly to audit for holes on each release.