You are correct. Signing a CLA is in effect saying you approve this project doing a rug-pull and becoming closed-source in the future.