[wfn]

Well, re: GDPR, for one Vlad is abjectly clearly wrong on email addresses not being PII. They are.

The mere fact of him relying on his rationalisation (of burner email addresses) over established GDPR definitions of PII is troubling. To me it rings immature and unprofessional. As a software engineer I shall treat PII with care and account for it. If a CEO is this defensive about their clearly wrong opinion, it's a red flag to me.