The important part is the contract the company signs for you. Contacts generally are enforceable in court and lawyers know of standard provisions for weird situations (what if the company goes bankrupt)

QT has contracts with KDE around the open source version which gives KDE peace of mind. I use QT in a commercial product - we have some useful contract terms with QT that are not public and I can't talk about them.