Hashicorp enclosing their former open source products is not the interesting part. It's that they also have authored a bunch of Go modules that lots of other products and projects consider "standard library". They could relicense them, too. Do you know your risks?