Completely agree here. There was no reason the people running this couldn't have been clear about what they were doing and why up front. I've dealt with GDPR requests before and it is a hassle. Especially when someone does it for the purposes of causing that hassle.