The EU has put open source at the centre of its technology sovereignty strategy. Access to code can reduce lock-in and improve scrutiny, but ownership, hosting, maintenance and exit capacity still decide how much control a cloud buyer really has. Here is how to assess the difference.