Old versions of CMSIS had a weird "only for use with ARM hardware" license header, which also carried through into most BSPs. I don't think this was resolved until around CMSIS 4, so it might just be a matter of front porting since it looks like normal STM32 stuff which is mostly permissively licensed now.
Yeah. And ngl porting up to newer versions of CMSIS isn't too terribly hard. I'm looking at porting up to CMSIS 6 soon and it doesn't look like it'll be that bad either.
