If there is a company in Panama that offers services in Canada, that means for their Canadian customers they are keeping 6 months of metadata in an easily accessible server in Canada. If they aren't, then Canada must IP block their services. VPN services that do not keep 6 months of your metadata also must be IP blocked.
The only way to get around this is to physically leave Canada.
This includes the team behind Lemmy. Being Canadian, after this bill, if they aren't logging every single ping that reaches their website and making sure it is easily accessible, they are committing a crime.