But this is restricting the user, not protecting the developers.

Unscrupulous developers can rip off code using another model, including local ones that can make literally anything. Opt-in protections against doing something bad to someone else don't work.

It's like selling cars with Tullock spikes.