You say the GPLv3 is too aggressive on requirements around patent defense, but the Apache 2.0 is okay? The Apache 2.0 license requires a patent grant. How do they differ in the patent grant?

I'd speculate that for many companies the GPLv3 is too strong in its copy-left stance, by disallowing Tivoization.