Copyright, by default, is not at all permissive. Every license (including viral ones) are more permissive than the legal default standing, not less.

This is why one company I worked for refused to let us use Webpack 1.x- a dependency of a dependency was an ancient npm module from the time that adding licenses to modules wasn't very common. It wasnt until the 2.x line came out that they finally updated to a version that updated to a version that didn't have that problem.