I really hope it will not be based in the US where law is dead and where IRS at the command of executive can remove non-profit status. That would defeat all the stated goals in the press release.

The only people who can save us are the ones who created the mess!

Looks like the negative publicity worked. CVEs are back on the menu: https://www.bleepingcomputer.com/news/security/cisa-extends-funding-to-ensure-no-lapse-in-critical-cve-services/