Surely the issue is harmless, and has nothing to do with the stuff GDPR is legislating against, right? Why not just share a general, fuzzy overview?

I am pretty sure that's what they're asking for. I didn't see a request for specific details. Just some high level details, rather than "we've had to spend so much money/time => clearly bad".

We’re told not to talk about any details (even high level) of this sort by legal because anything we put on the internet could be used against the company in court even if it seems harmless to us. If you want to find out about the difficulties just find an engineer working at a major company and ask them about it in person.

What part of "super fuzzy high level overview" was confusing?

Oh, sorry. My bad.

Heavens knows no one has ever been legally compelled to elaborate on a "super fuzzy high level overview" they previously volunteered.

You are being silly. You completely misread what I said and bnw you're attempting to reference insanely improbable scenarios.

Just point out the exact part of the law you guys are having a problem with. If you can't do that, it's because you're just making shit up.