Any registrar making money on whois privacy has an option and motive to autorenew the privacy with the domain. If anything Namecheap bugs me with it because I don't want whois privacy on my domains!

If you don't want it, then you can use pretty much every other registrar that doesn't build it in.

But an issue with whois privacy is that if you ever don't have it for a period (like you forget to renew/autorenew), then it's now saved in a number of DNS/whois history services.

Those services are probably also in breach of GDPR. :-)