One thing that concerns me is the security concerns with the export function in GDPR. So now a hacker can get in and just export all my data in an few minutes

One thing that concerns me is the security concerns with the export function in GDPR. So now a hacker can get in and just export all my data in an few minutes so that changing my password won’t lock them out?