It is their customer base that will simply be the ones to suffer - last week we were about to buy a .ca through another member for $xxxx but I could not get the okay to proceed when they said they did not have the original registration confirmation so as to actually provide a basic proof of their being the real registrant. Since I am only back on things today I doubt they waited for me.
Without a letter from CIRA or solid proof like the registration message, it would be very risky to make a transaction with anyone holding a .ca domain through Sibername right now. There are many examples - with more to come - in our own customer base where domains have been transferred away to someone else, and the link each time is Sibername or Bulent directly.
Once this is all sorted out I will apply to CIRA for being a registrar because it will be the only way to be safe over the long term.