All true, and also GDPR has nothing to do with a developer not being allowed to give data to its manager. This is all paranoid bullshit. The author must have been a real pain in the ass to work with.