I didn't realize that CVE was funded by the DHS. Isn't it better for it to be independent and not funded by an intelligence agency?

It's enough of a public good to have a common advisory for vulnerabilities that FAANG should just kick it a few million a year. How much can it possibly cost to run this anyway?