The whole package is not FOSS. Individual files might be.

You are right that my assumption in this unusual arrangement is that the binary does not necessarily correspond to (the same version of) the source code.