People asking to exercise their rights on their own private information are not trolls.
Instead they are being forwarded to a service that does monetize their service.
No, it is because of an overreaction to a request. If they are acting in good faith then just reply
"Here's the privacy policy. Here's the data export page."
OP could have waited for the regulator's letter before doing anything.
1: https://www.linkedin.com/pulse/nightmare-letter-subject-acce...
These aren't their natural right. Some laws are just bad independent of whether most people support or agreed to them. This is most obvious in dictatorships, but dysfunction strikes all systems.