It's a good point, but it matters for Apache licensed code, too, because Apache 2.0 has a self-destruct clause in the patent grant to keep all parties' lawyers

It's a good point, but it matters for Apache licensed code, too, because Apache 2.0 has a self-destruct clause in the patent grant to keep all parties' lawyers in check. CLAs (like the one Microsoft uses) routes around that. The way this ends up working for Microsoft projects licensed under Apache 2.0 is that it essentially allows Microsoft to do anything with the contributions (as if it were licensed under MIT, with a liberal interpretation of the implied patent grant), but requires everyone else to continue abiding by Apache 2.0. Not exactly balanced. EDIT: I'm totally confused about why people are having a problem with this comment.