This was discussed on this mailing list a couple of times, most recently 2019-01-27 (sorry I'm on my phone so no hyperlink). Though this is the first time I've heard MTS admit they are doing it.
The security issue was an NTP network amplification attack but I think that was solved years ago and MTS just left this in place.
The CRTC requires carriers to report any traffic shaping or blocks but last time I looked mts was still claiming on their website that they don't block anything.
You could try and report this to the CRTC but my guess is even if you got anywhere, MTS would just update the website to say they block NTP rather than fix the problem.
John