> Alternatively, repackaging existing OSS as a commercial product while only adding some legal liability as an add-on might become a viable business.
bingo
bingo
... from a longer transcript here https://www.infoq.com/presentations/security-supply-chain-os...