One big security issue seems to be the complete removal of two-factor authentication. And, they don’t even check with your old email when changing to a new one - so that could be a pretty easy way for someone to take control of your account. The issues with it just go on and on.
Best to remove your payment and change your passwords now for this vibe coded mess.
I am not.
Also last I heard their helpdesk - where GDPR requests would presumably need to go - is not working.