m-s

Getting refunds for App Store/in-app purchases has been a breeze for me though.

How would you “steal” money from a contactless card or a phone?

Yes, you can. But only drinks with up to 4.7% abv

I have my own domain and run a Cloudflare Workers endpoint that updates a DNS record. It’s quite simple to run one’s own dDNS service.

You can still click through the phishing warning

You need an iPhone to link your phone number though.

“willingly” is a bit of a stretch

You can host the webfont yourself. And an email contact form doesn’t require a cookie banner.

Without getting into the question of whether this study involved human subject research, I find a lot of the anxiety and paranoia unwarranted.

Companies to which these laws apply should already have a process in place to deal with subject access requests. Complying with relevant laws is just part of doing business.

All the other site owners could have figured out with a bit of googling that the laws don't apply to them—there is plenty of guidance available.

I can only speak for the GDPR here, but had the requests been real and valid, the worst outcome would have been a regulator telling you to comply with it. Data protection authorities are more interested in helping companies get into compliance than punishing small businesses for minor infractions. If you look at past decisions, it usually takes serious and/or systematic violations to get fined.

I think there have been more in-flight battery fires than (attempted) terrorist attacks.