Restricting "official" contributions is really about limiting the legal attack surface.
Restricting "official" contributions is really about limiting the legal attack surface.
- Amazon already has immense attack surface
- software is generally distributed without warranty and includes liability disclaimers
- They wouldn't even be distributing any of the software. Any lawsuits based on contributions like that should be thrown out at the nuisance level, and they must already have an army or lawyers dealing with those.
(I only play a lawyer on the internet)
Now, one might argue that many of the other attack surfaces are necessary byproducts of markets they want to operate in, and software development isn't a market they're profiting from, therefore they shouldn't unnecessarily open themselves up to potential litigation.
However, given how much so many other large companies already contribute, publicly, sometimes to the very systems Amazon may be using, it does seem a pretty hollow claim.
If some of Amazon's system failed because of some patch that Google contributed to project X, would Amazon's first reaction be to sue Google?
(Also not a lawyer)