CIRA is without doubt the best run registry worldwide (I own domains in more than 10 extensions including many cctlds).
CIRA continuously verifies canadian presence requirements and actually has a team whose main purpose is exactly that, namely verifying that a .ca registrant does meet Canadian Presence Requirements.
Of note as well is that the owner of a .ca domain is the registrant name not the admin contact. The registrant name is the legal entity that has the right to use the domain. The admin contact is only a contact that can be appointed by the registrant.
So if owner of a domain has another person as admin contact, and a feud materializes between the two, the registrant will prevail and the admin contact will go empty handed.
So if a non canadian person (Party A) makes some kind of partnership, deal, or understanding with a Canadian entity(Party B) for the purpose of registering .ca domains, whereby Party A is the admin contact and party B is the registrant, it is true that this will be fine from CIRA point of view but it will give zero protection to party A. Party B can keep the domain without issue and party A would be literally screwed with zero recourse.
The morale of the story: A non canadian entity wishing to register a .ca domain through the help of a third party must have an iron clad legally binding agreement with that third party to protect its interests.