I'm of two minds about this. Companies who are buying into the idea of the GDPR being scary, and who think this sort of thing is a good way to ignore the GDPR,

I'm of two minds about this. Companies who are buying into the idea of the GDPR being scary, and who think this sort of thing is a good way to ignore the GDPR, are leaving money on the table. But those other companies, who actively want to defy the GDPR; who don't want to protect their servers from hacking and think they can ignore my requests to stop calling me or emailing me, those are companies that I don't want any involvement with anyway. This sort of script doesn't protect them, and they deserve what they get.