If you hypothetically pull a Facebook here, do you want someone coming out of the woodwork eight years down the line with a credible claim that they own your core IP? No? Then disclose and get explicit assurance that they do not, in fact, own your IP.