Why are there criteria changes being made without a discussion thread and approval first?

What changes? No changes have been made without a dedicated discussion thread and consensus.

If we are looking at today, then the changes at update!: Change VPN kill switch criteria by jonaharagon · Pull Request #3204 · privacyguides/privacyguides.org · GitHub were discussed extensively at Remove IVPN. For evidence of clear community consensus, see:

The proposed changes at update: Warning about Proton kill switch on macOS by jonaharagon · Pull Request #3205 · privacyguides/privacyguides.org · GitHub and update!: Remove ProtonVPN by jonaharagon · Pull Request #3203 · privacyguides/privacyguides.org · GitHub are both specific responses to discussions within the Remove ProtonVPN thread.