I believe the point of this post is to introduce their "Use The source" mailing list[0] where they publicly track and encourage compliance with the GPL from ven

I believe the point of this post is to introduce their "Use The source" mailing list[0] where they publicly track and encourage compliance with the GPL from vendors who release products containing GPL'd software. It's a spiritual successor to the old gpl-violations.org mailing list. The security angle is because fixing a vulnerability is a fairly compelling reason why someone might want to update the software in a device they've purchased. Vulnerabilities found in Linux and other GPL'd software often get fixed fairly quickly, but random Linux-based IoT devices and whatnot often ship with ancient versions of GPL'd software and never see any security fixes. ("The S in IoT stands for security.") If the vendor complies with the GPL, then end-users can patch it themselves. But, many vendors don't, hence the need for the new mailing list. [0]: https://sfconservancy.org/usethesource/ https://sfconservancy.org/usethesource/