That is a good question.
In general, it is up to the government that issues the tender to take into account things that might represent a threat to public security, whether national or regional.
In the case of a public tender for rebuilding subway cars in Toronto, the public security aspects do need to be taken into account. If we can think that a business, Chinese or otherwise, presents risks because of a close connection with the Chinese government, that absolutely has to be taken into account. It presents risks relating to access to critical information or to information about a critical technique or infrastructure.
What I understand at the moment is that things like these are not covered by the Investment Canada Act. They are the responsibility of the government that issues the tender. The question to ask ourselves is: does a municipal government or regional authority that issues this kind of tender have to take those elements into account? I don't have the answer. You would have to ask them.
In cases like that, we can ask ourselves what powers are given to the federal government or the provincial governments to impose criteria like this in awarding contracts. One thing is certain, when it involves a subway, it involves potentially critical infrastructure.