They can change it to closed source, and anyone can start a closed-source fork. The contributors I know wouldn't stick around after such an event, however.

If that's a problem for you, you could try VyOS (LGPL/GPL2/GPL3 mix) or dnxfirewall (AGPL3).