[grumbel]

AGPL is only concerned with source code, it doesn't address how to handle a user's data in any way. Giving you the source, while keeping your data under locks is perfectly fine under AGPL.

Meanwhile the GDPR has the concept of "Data Portability" and requires every service to allow users to export their data, so that they can move it somewhere else. As far as I know, there is no Free Software license with similar requirements. They all stop at the source code, which just isn't enough in a modern SAAS based world.