Unfortunately, many CLAs give the company that controls the code the power to take the project proprietary (and they will call this the bare minimum of what they need). It's repeatedly happened, so contributors need to be careful with what they sign. Perhaps for a small bug fix they won't care, but for anything larger, beware.