I'm pretty sure decimalenough was talking about having the project structured in an org and only allow org members to contribute, not to automatically allow contributions from people that are members of a completely unrelated, corporate-managed org like google.