Pretty sure that pretty much all of their business practices are GDPR violations. So we do have a choice - we could either end privacy, or have legislation that ends a potentially profitable startup.
There are millions of ways for profit but you only have one privacy.