That’s exactly the case. We are allowed to do open source request, legal team writes a list what can we do (don’t share, don’t distribute, don’t release, internal use only, etc) and this goes on like this. Since legal team takes weeks, we write our own half baked solutions and use open source extremely seldom.