> court won't force releasing our code when a "rouge employee" manages to violate the license.

Is this an actual, real risk? Has a court ever forced anyone to release their code because they were violating the GPL?

My understanding is that this is not how this works. If you violate the license you simply don't have a valid one and basically committing copyright infringement. The punishment for that isn't being forced to comply with the license, it's having to pay damages to the copyright owner.

Showing good faith doesn't really change the end result: you're using code that you don't have a license to. The only fix is to start complying or stop selling your software until you remove the code you don't have a license to use.