Oh, and here’s an idle thought train – let’s take the negative rights idea a step further:-
1) identify a VID that is yet uncommitted (I presume there is a list). Choose a number that has some vague recognition value, say 0xF055 (FOSS), but don’t call it a VID, it’s just the name of an online community.
2) start (i.e. publicise) an online community to support development of USB Free Open Source Software. Membership is free for proven FOSS developers.
3) Members get a membership number, you gussed it from 1 to 65535. It’s not a PID it’s a membership number!
4) Doesn’t matter how large the USB-FOSS community is, the appearance of growing support should be enough that eventually no commercial vendor is going to want to be issued with VID 0xF055.