@ploum
It all really depends what you want a CLA for.
Some want it primarily to increase their own freedom over the project, like license changes.
Some want it primarily for assurance of provenance.
Some want it only from the maintainers (I know that exactly this has been argued for in Apache circles), which then essentially constitutes a permanent sign-off on everything they do.