Good point. Are there any protections to prevent that? I believe if they use Mastodon, they have to publish the source code. I believe Activity Pub would be the same, assuming it has a good license. But they could always use their own code without touching the open source implementation.