> "the CC feature in itself might be a GDPR violation" is a, to use your words, "retarded" idea

Well, yes, I agree.

> This is classic GDPR fear mongering

Well, no. The person who suggested that it's a violation is anti-email, not anti-GDPR; it's implicit that they think it would be a good thing if the CC feature were inherently illegal.