rouzh
I wish I could say I was more surprised by the items you raised, but I've noticed that there is certainly a large contingent of EVERY workforce that seems to suffer from an inability to take any kind of pride in themselves or their work, and unfortunately, those of us who ARE able to focus on work tasks during work hours have been trapped in the "butts in seats" paradigm for decades as a result of those individuals. I'm glad to see the market finally correcting itself.
Collecting telemetry is a decades-old method of getting real data about the behaviour of a program in real-world environments. This is why web browsers, smartphones, and OSes all have telemetry collection routines.
Isn't it? Just one particularly absurd example: logging IP addresses in your httpd's access logs can be considered a violation of GDPR. [1][2][3]
[1]: https://www.whitecase.com/publications/alert/court-confirms-...
[2]: https://www.gdpr360.com/gdpr-ip-addresses-and-classification...
[3]: https://www.smashingmagazine.com/2018/02/gdpr-for-web-develo...