Those requirements are designed to allow Quebec's provincial party a seat at the table, while impeding access for parties such as the Greens and Peoples. They're basically an example of institutional discrimination that came in fairly recently, with a pretty explicit target/goal.
I have much less interest in sitting through a debate between 4 people, when 1/4 of the time will be dedicated to a guy talking about one province's interests, and where that party doesn't even run outside of that province. Guess I'll just wait for my media bubbles to give me the highlights and hope that it's not too biased.
I'm honestly not totally sure what to think about this one, though I recognise that it's a big shift/likely a negative overall result.
Reason I'm humming and hawing, is that there are lots of expensive cybersecurity type 'things' that rely on the CVE system, without explicitly paying in to that system / supporting it directly, from what I recall / have seen. Take someone like Tenable security, who sell vulnerability scanners that extensively use/integrate with the CVE/NVD databases.... companies pay Tenable huge amounts of money for those products. Has Tenable been paying anything into the 'shared' public resource pool? How about all those 'audit' companies, who charge like 10-30k per audit for doing 'vulnerability / penetration tests'.
IT Security has been an expensive/profitable area for a long time, while also relying on generally public/shared resources to facilitate a lot of the work. Maybe an 'industry' funded consortium is the more appropriate way to go.