Given the context of GDPR data portability, it seems more likely that they're saying that businesses shouldn't have a right to hold data hostage as a method of lock-in, especially in lieu of providing a service people like enough to voluntarily stick with. The "targeted advertising as payment" thing is a separate can of worms that they may or may not care about.