They were the initial source, TF’s reporting added some questions around what exactly this could mean in practice for VPNs that span multiple countries, which most do. It sounds like the bill (unsurprisingly) isn’t well-considered and will have problems in practice.

Nobody reporting on this has mentioned Tor yet, which could be seen as a VPN serving many users (including many involved in intelligence work). That’s going to create some interesting fights.