I'm the first to agree that contributions can't be stolen in this scenario but read the threads I'm referring to. People feel that way anyway if you stop supporting a component or distribute your focus between a free and a paid tier.

What we need is more awareness that looking at the license alone is not enough to make an informed decision if contributing to a project is aligned with the contributors attitude and personal goals.

With that in mind: Thank you for putting the CLA right in the repo where it belongs and people can easily find it. Many organizations put a license upfront and bury the CLA. For a particularly bad example try MonoDB.