They do, but it's mainly a precautionary measure for them IMO. Too easy to get some AGPL code caught up in some project and then due to its viral nature that entire project would be "tainted", costing them control.