legal doesn't know what it doesn't know

implementing controls to prevent or detect this kind of copypasta is very hard.. even more so at larger "serious" companies that have dozens of development teams spread across the world working on an enormous catalog of products

this happens far more than people want to admit.. there's a very slippery slope when it comes to searching for help online.. it's amazing how quickly a google search leads to a stackoverflow post that has sample/example code which then winds up in your company's codebase.. even at "serious" places

writing a clear external code usage policy that's covered in those yearly training programs that developers hate and blow through as fast as possible is about as good you're going to get stopping this kind of thing