Comment by drewdevault

Consider discarding the CLA if you anticipate third-party contributions. If you need to verify provenance, the Developer Certificate of Origin is a better approach. Otherwise, this (correctly) reads as a project which intends to take advantage of FOSS contributors for a while before pulling the rug and making it non-free again.