A marketer who wanted to build lookalike audiences from existing customers, I’d guess.

If marketers may randomly deploy code without review then something is deeply broken.

If this passed review - it is likely even worse.

I agree. Unfortunately marketers deploying custom code via Google Tag Manager is the norm.

It's troubling that companies don't see this as unethical at best.