This was asked before, but it is under the AGPL (which means that if you modify the code you must make the modifications public), to make it a closed source project you would have to get the agreement of every contributor or rewrite it's code which is very hard to do (and i don't think i ever heard something like this happened). The federated aspect is another line of defense.