My favorite legal work in trying to address this is the 3DPO license (accompanied by an excellent article describing the issues in more details).

https://jipel.law.nyu.edu/vol-2-no-2-1-greenbaum/