Open source should create a new license where it specifically doesn't allow release to these "trusted partners".