Isn't this a PII? According to GDPR, wouldn't they need a justification for storing it? (informed consent, business reason, etc.) They had a huge stink on this

Isn't this a PII? According to GDPR, wouldn't they need a justification for storing it? (informed consent, business reason, etc.) They had a huge stink on this some years ago when 'some random engineer decided to add it to Google Maps sniffing'.. and now it's opt-out? I must say I'm surprised.