My understanding is that there's a period of time after receiving a cease-and-desist that you can remove the offending GPL library without opening your codebase. After that, there's no harm to either side:

They don't have to release code and the licensed software's owners don't have their rights violated any further

Of course, IANAL