>$40k/year on "data protection services" (?!?) I'm guessing this is paying an employee/consultant to ensure they are compliant with everyone's policies. At tha

>$40k/year on "data protection services" (?!?) I'm guessing this is paying an employee/consultant to ensure they are compliant with everyone's policies. At that scale you have to care about every jurisdiction and letting the one dev guess at compliance might not be ideal. > 60k for "site moderation" (they could instead not moderate or rely on third-party forums and messaging services they don't need to moderate). Can you even just not moderate? There's some stuff you legally have to due to say NetzDG for German users, and compliance with everyone else.