Interesting... I'm sure that lawyer knows more about this than I do so I wonder what part of it I misunderstoood...
julialang.org also lacks a privacy policy and loads trackers like Google Analytics without user consent. The core devs don't seem to care about the GDPR.
That's really not a fair characterization of the situation.