> None are empowered to sign contracts or legally represent the developers > who make up PGDG.
It is not the developers comprised of PGDG who are required to sign into an NDA. It is company A, B, or C who would need to sign an NDA with "some legal entity", giving that legal entity the power/right to sue company A, B, or C, were they to release the information provided to them inappropriately under a breach of contract.
Notionally, perhaps a PGDG developer would provide the data to the 'legal entity' who would then provide the information to the company, to legitimatize the contract, but that would not require any NDA or contract to be signed by the PGDG developer.