[johnklos]

You listed just one slightly onerous requirement: allowing people access and agency over their data. If you don't store their data, you don't have to do that.

It's a bit hyperbolic to say that you're, "not even half way through the article and I'm skipping over tons of what it's saying needs to be done", when you've literally only listed one thing.