No real contradiction: MS implementation is probably in line with current data protection regulations. Everyone has eyes on them.

Doesn't mean others will take as much care, or that new cool tools will not push the boundaries of what's ethical, safe or even legal.

We've seen it with many industries, not least the ad industry: some actors stay within the dotted line, but there is tremendous financial incentive not to.