Except it isn't "now" it was a thing since covid.

And it's not overreach it's kinda more of a loose exception to the GDPR which actually allows companies to read messages. Which they would already do without GDPR