It's not just that corporate counsel will want you to audit. I worked at a company where I found a GPL violation and wanted to comply, but if we started complying with the GPL it would have shown that we knew that we previously hadn't been complying, so I was told to not comply. Ugh. Just for redistributing a couple binaries, there were no libraries involved.