What? No, that's not even slightly what I'm talking about. The simple and obvious fact is that some upstream projects only distribute patchless tarballs despite their development being performed in a patch-oriented manner. Not all of these upstream projects are the sole copyright holders of the code in question. Debian ship these projects anyway, which implies that nobody seriously thinks that they're violating the GPL.