i’ve had to deal with situations like that before, not specifically because of gpl but because of international regulations. one of my customers was a digital id provider, and they had one of those super-accurate timekeeping/cryptography servers they needed to move from lithuania to sweden. because of laws surrounding encryption of personal information, the server would count as compromised if there was ever a single second where it was left without supervision. so they had two of their people drive non-stop through poland, germany, denmark and half of sweden with the server on a ups in the back seat.
I think it would be very difficult to argue that that is reasonable but that would be up to the courts to decide.
i’ve had to deal with situations like that before, not specifically because of gpl but because of international regulations. one of my customers was a digital id provider, and they had one of those super-accurate timekeeping/cryptography servers they needed to move from lithuania to sweden. because of laws surrounding encryption of personal information, the server would count as compromised if there was ever a single second where it was left without supervision. so they had two of their people drive non-stop through poland, germany, denmark and half of sweden with the server on a ups in the back seat.