There is nothing mathematically unsound, I would even say that it should be trivial to transition to a permissionless setting. You just need to implement a proof of stake algorithm. The only questions are: what scheme do we want to implement and when does it make sense to transition. Libra launching as permissionless would be DOA.