The FSFE justly drew the line at providing private information of supporters. How many other customers of Nexi simply handed over such data 'because audit'?
It's not even just private information, because in any properly configured system it is explicitly unknowable information.