But requiring a security review is a bit much. I did security reviews for a living. The consulting company was paid $250/hour for my work for the client. When open source pays me $250/hour I'll do a security review. They are hard, they are subtle, and they require you to be "up to speed" on the latest, greatest, CVE announcements. You did read, understand, and are able to find the Qualcomm hole, right?. You do know how to find an attack against your software that is embedded in the hard drive controller, right? Keeping up with the flood of attacks is REALLY a full time job. I don't have the time to keep up anymore.
As for "legal notice in every file"... no. The license is included with the source. If you choose to ignore it or copy single files (allowed by my license but...) or any other circumvention then that's your problem, not mine. I gave the code away.
As for legal issues... I've studied copyright and trademark issues. I've had discussions with an IP lawyer. I know "all the words". But being my own IP lawyer is a fools idea. IP law is at least as complex as my program and subject to a lot of side-conditions as well as site-issues (aka courtrooms). Did you remember to include a severability clause? (In law, severability refers to a provision in a contract or piece of legislation which states that if some of the terms are held to be illegal or otherwise unenforceable, the remainder should still apply.) No? Well, then ANY part of your legal claim throws out ALL of your legal claim. Unless you have a law degree AND specialize in IP law, you don't know what you're talking about. Oh, and lawyers charge big bucks which you won't earn in open source. So, no, I'm not gonna be my own IP lawyer.
"Software does not live up to security review and legal standards"... issue closed. won't fix.