Just read your own link and try to understand the consequences.
"Second, during research, the device and computer program should operate “solely for the purpose of good-faith security research.” This means, in part, that the research “must be conducted in a controlled setting designed to avoid harm to individuals or the public.”"
Read as: No open discussion about bugs -> Goodbye public access to code. Goodbye Bitbucket.
In court ML acting as "security tool" will melt like a snowball in hell. Just because of "solely" ...
"The rule defines “good-faith security research” as “accessing a computer program solely for purposes of good-faith testing, investigation and/or correction of a security flaw or vulnerability, where such activity is carried out in a controlled environment designed to avoid any harm to individuals or the public, and where the information derived from the activity is used primarily to promote the security or safety of the class of devices or machines on which the computer program operates, or those who use such devices or machines, and is not used or maintained in a manner that facilitates copyright infringement.”"
Read as: ML has to stop all further development of features not implemented by Canon.
