The heading seems very strong considering this is a governmental agency and since they audited a "version of Google Analytics from 14th of August 2020" and presumably not GA4 that works differently.
Rereading it now seems like "companies" in the heading only refers to the three fined companies and that the decision may be applicable to other companies.