yes, but no. from the article:

There’s an appeals process so someone can still actually file CVEs for issues even if we say no, but at least there’s a process where both sides will argue their points.

which is how filing for CVE should have been organized to begin with.

noone should ever be able to file a CVE without the product owner having a say in this.

filing a CVE should always include the party that is responsible for the vulnerability with proper checks and balances.

the current process allows accusing someone without the accused having any ability to defend themselves. it was created with the expectations that only security experts who know what they are doing will file CVEs. that expectation has not held.

this is pretty much why linus thorvalds refused to announce when they fix security issues in the linux kernel.