Starting to enforce Developer Certificate of Origin (DCO) for (some) ROS 2 repos

I’m not disagreeing with that decision, but I’m interested in knowing the basis for that envision. Brian’s explanation seems mainly to pertain to the state of things a few years ago and starting simple.