Do we need embargoes for GPL compliance issues?

[Florian Weimer <fw@deneb.enyo.de>]

Do you think Debian should welcome embargoes for GPL compliance
issues?  Security embargoes are a huge pain, but one would hope that
GPL violations by Linux distributions are much rarer events.

I'm asking because even with the GPLv3 or the Common Cure
<https://github.com/gplcc/gplcc>, the 30-day period seems awfully
short.  I don't think even organizations that care a lot about GPL
compliance (even formal compliance with exactly matching sources) will
be able to address an accidental violation in that time period.

Although the cure period only starts when notified by a copyright
holder, with a public notice, other, less cooperating copyright
holders might send a notification of their own and start another
clock.

Nothing can be done about GPLv2-only violations and the resulting
license termination, of course.