That would help, but I think that only works optimally if they also do number 1. If there is any "activation" process or the like, it adds enough friction to cause problems, especially in a modern CI/CD environment. It's not an easy change by any stretch, but if they don't do something they're going to be the next Oracle.