Uninstalled after 3 years

It logs information I don’t need (e.g., failed login attempts — I have a security plugin for that). And with the last update, I found out that emails and passwords were being logged. What about personal data protection and the GDPR here? It seems to be turning into a data monster that a regular community admin can’t control. That’s why I uninstalled the plugin after using it for 3 years.