Although, I am suggesting to view these not as vulnerabilities, but rather as defenses. Once a company violates the GPL2, they get stuck in a DB. Authors could search the db to correlate users/violators of their code with people suing them, or otherwise being malicious.
While I could see some bad uses of such a DB, it seems like mostly it could be used to attempt to police bad FLOSS citizens by FLOSS authors.