They say the binaries are being made under Apache 2.
They don't say anything about the source code being published. That's why (to me) this is so interesting. I've never seen binaries released without source code before.
What is even the point of releasing binaries under Apache 2? When I patch the binaries, do I need to release a hexdiff too to fulfill my Apache obligations? Very weird.