~10 years ago I learned from someone who knows that GCHQ asked to be spliced into the bugs database for the Tor Project, to gain prior notice of exploitable bugs. They were politely declined.

It seems that they now want to formalise this approach for everyone, by force of law:

https://webdevlaw.uk/2023/11/08/investigatory-powers-act-amendment-kings-speech/