A lot of things could be done, most projects don't do much that is extra work. In practice most projects do something that is within what is socially acceptable

A lot of things could be done, most projects don't do much that is extra work. In practice most projects do something that is within what is socially acceptable, what people do and what does not require extra effort. The fact that even large projects like the Linux kernel are much more relaxed about pseudonymous contributions today to me is at least an indication that this is where things are going.