> I appreciate your alleged concern for your users’ privacy.

Person who wrote this is a dick. They're assuming motives and they also didn't do any due diligence to realize the registrar isn't under the GDPR or located in the EU.

This irks me. It feels like if someone discloses a security problem in a city's bus/train ticketing system and the first response is to go to the sheriff's department and see if that person can be criminally prosecuted rather than work with the guy or gal who wants to help you fix your broken system.