They can't catch everything but they can make your product you're building on top of it non viable when it gets popular enough to look for, like they did with opencode.

at least with open code you can just use a third party plugin to authenticate