AGPL, which Mastodon is licensed under, was created to address exactly the loophole you've identified.

Under the AGPL, modified forms of the software that are used to provide user services must be distributed under the same terms.