coldcard used a trezor library and built on top, foundation built a coldcard mk3 in different clothing, advertised it as such, raised money pre-product on that as the premise, and accepted preorders for it before releasing their own code publicly

Aside from the fact that they diverged significantly since then, forking the *exact same code* with no modification with different hardware is entirely permissible. Don't release firmware on a license you don't agree with in the first place, and don't make a fuss when people do things that are entirely permissible under that license. I don't care that they changed their license, but calling others "clones" is braindead and spineless.

Disclaimer: I do not own a Passport or a Coldcard.