I get that these things can change over time, and there are incentives to do so, but this is why we must take legislation like the GDPR seriously, companies mus

I get that these things can change over time, and there are incentives to do so, but this is why we must take legislation like the GDPR seriously, companies must do their due-diligence on contracts with service providers, and we should hold those breaking contracts and/or the law to account. I don't "people are going to break the law so let's not do anything" is the most pragmatic response. I don't disagree, and can certainly empathise with it, but I do see it as closer to Mozilla's principled stance than to what I think most people would be happy with (assuming they had the facts, which most don't).