Exactly. Project leads also decide on what licenses they release their code/project under.

Generally, a project's only going to be taken over because the creators/managers of said project allow it to happen. Often through negligence, laziness, passing the project onto others who can't be trusted, and/or out of deliberately capitulation.