Canada

Yes but also what is important is establishing meaningful, stringent, enforceable, independent security auditing of the tools that Canada chooses to use, they must be open in this sense if not fully open source. There is the obvious but quite unfortunately likely possibility Canada could throw out Microslop only to recreate the worst parts of it domestically. Canada must keep their eyes on two balls in this sense, getting rid of Microslop AND doing better at the entire framing of how these tools are built and maintained otherwise all the effort to get rid of Microslop will become a slap in the face when you end up in almost the same place... which none of this is meant to bash Canada at all, this is just how these things tend to want to go given the forces at work....