WordPress installations have been forwarding PII without consent for 17 years

They've been forwarding PII to what Mullenweg has legally established to be his private, personal website. It doesn't forward it to a WordPress site of any kind. In other words, WordPress is leaking PII directly to Mullenweg.

It's all okay if it doesn't get misused and you trust Mullenweg, but he himself has shown he can't be trusted.. so this will all bite him in the ass.

This was one of the main reasons why I stopped using Wordpress years ago. The other was the difficulty of keeping WP sites secure.

Not the only reason I default to Next.js apps now, but I always assumed this was happening for about a decade.