But I think posts like this explain why I’m not a huge GDPR fan yet.
On the one hand we have enormous tracking empires, who most likely are maliciously compliant with GDPR. They have probably not lost much precision / revenue due to the legislation. Mostly business as usual.
Then on the other side we have “normal” companies who are doing mostly “normal” crappy stuff all larger enterprises do. Clouddlare aren’t maliciously spamming people, they’re just incompetent handling their email lists. And sure it’s not a great look, but keeping someone’s email address around is probably not something governmental agencies should get involved in, in most cases.
The tone used in this post would, for me, be appropriate if Cloudflare did something horrible with your data. Selling traffic infi to data-aggregation firms, having lax security for accessing your customer portal, beeing hacked and leaking data etc.
Not “just” being sloppy with ther mailing lists.