OK, here's a (not so) hypothetical question...
Suppose you know of someone who used Fontlab to change the permissions on a font so they could embed it in a website using WEFT. What responsibilities do you have, especially if they are not a part of your organization? What steps would you take? Does it change if you don't think highly of the particular foundry's EULA?