This is a great piece of investigative journalism and a great write up. Like the author says what they’re doing is not illegal and it’s GDPR compliant.
It definitely makes me think though that GCHQ certainly have the deanonymised stream of data from all cellular providers - only for use in “matters of national security” of course