According to Bunnie one of the major blocks is liability if a commercial provider of open CPUs also provides open pre-built code if its found there were undetected flaws, especially if those flaws can't be fixed without spinning up new chips.