Yes, even if the group is racist bigots, warlords, or plain malicious idiots, those are still covered under “any group”. And I would argue that that is a good thing. Not that these groups exist, but that there are no exceptions one might use to create trouble for users.

Seeing how the nouveau-right loves playing their victim card, that will just be gasoline for their hate-engine.

If you see crypto as an investment, you shouldn’t use crypto, imho.

Not sure reality agrees here. Unless the project is huge, it will most likely not see any money. With copy-left code they are at least required to share their improvements and contribute that way. (I am aware of the no-gpl policies of many companies)

What’s probably a better Model are Nextcloud’s “SupportaaS”, Sourcehut’s consultancy, or mailcow’s SaaS. (I also see SaaS critically, but if it’s Libre I’m okay with it)