You are correct. They can however stop doing business with whoever is distributing their source, which makes getting new versions of the source harder.
This is what the dude selling „hardened“ versions of Linux is doing. Can’t remember the name and I don’t care to give him advertisement anyway, but he simply stops selling you new versions if you distribute old ones.
Yeah, that’s it.