I should have been more nuanced: signing a CLA is the same as releasing your code under MIT license: if your code is worth anything, a large powerful entity will steal it and claim it as their own.