If new (and existing too!) projects use the AGPL, isn't that sufficient to deter the worst offenders ?