My takeaway: I should be able to just attack someone by telling a company to delete all their data.

I wonder how many social media or email providers will let me delete someone else’s account?