I have posted this bug report https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=896806 that has been rejected by the maintainer. Maybe I have misunderstood the issue completely, but I do have some experience with legal issues and AFAIK, there IS a problem here. I am posting this to the mailing list in order to get "more eyes on the issue". Kind regards