It was an otherwise interesting take but the GDPR stuff was very off; i.e., that a data repository (such as Zenodo or GitHub) could somehow be GDPR-compliant. It doesn't work that way.