I got the same impression - the lack of understanding of the basics of GDPR makes them look as amateurs, not professionals trying to raise the bar for privacy. I was considering using Kagi, but this is a massive turn off.

They'll likely discover that GDPR is not that optional as soon as a customer (or a competitor with a grudge!) reports them to their relevant national privacy/personal data protection authority, after which they'll get to have a very uncomfortable conversation where they will not be able to use those arguments