That's not how it works. Open source makes it trivial for the nerds inside a company to deploy. Soon, they start taking advantage of various APIs and integratio

That's not how it works. Open source makes it trivial for the nerds inside a company to deploy. Soon, they start taking advantage of various APIs and integrations. They'll have scripts written in Bash, Perl, Python, Ruby and what not talking to various API endpoints, communicating with other systems using JSON, XML, etc. Every single bot or integration like that is one more "tentacle". Without signing a contract or even having the board or upper management discuss it, the organization is now entrenched with this piece of software. Comes along a new regulation for your industry; GPDR, SOX, HIPAA, etc. It doesn't matter. What do you do? Fortunately, the provider of your "open source" (or rather: open core) solution offers features supporting your use case. You just have to upgrade from the MIT-licensed core, community edition to the enterprise edition, for $xx,xxx per year.