Replying to
@simonzerafa@infosec.exchange @parisba@cloudisland.nz I'm not a lawyer but I suspect none of this is technically illlegal in any way. Most of the tech industry has relied more on one-sided terms & conditions and the general assumption that companies should treat their users fairly, rather then legal requirements for them to do so.
Attempts to introduce consumer protection legislation (like the EU GDPR and DMA) have been globally fragmented, and met with massive pushback and disdain as "slowing down the speed of innovation".