In the case of CRAM as a part of Linux the ultimate control still lies with Linus Torvalds. Other Meta projects like for example zstd can be forked as soon as they do some fishy stuff with it. But I do agree, when Meta is in the role of maintainer, we should keep a close eye on how the projects develop.