Is it less risk to hire the open source guy? What if he spent a bunch of time at his last employer working on un-sanctioned projects? Will he do that to you as well?

Just playing devil's advocate.