Paul is only making requests as a developer. These are considered to be ethical terms that the author of a derivative can comply with, but not mandatory. Aaron _can_ choose to ignore these requests - but would that be to his benefit?