Isn't this how using GPL-ed code in commercial contexts work? You don't have to share sources with the outsiders if you don't ship the program to the outsiders - and your employees and contractors are bound by their contracts to share neither the proprietary extensions nor the resulting program with the outside world. Note that SaaS means you're not shipping backend software to users, which created a loophole that has a special GPL variant patching it.