They call it GDPR-friendly because there is no serious enforcement of the GDPR and so they know they will fly under the (non-existent) radar.
This is the same reason how websites claim to “comply” with the GDPR with a cookie consent prompt that only allows you to accept (and declining is hard/impossible).