In reply to Jeremy.

@Jeremy: Whataboutism won't help. Jetpack out if the box is not GDPR compliant, period.

There is no notification during installation that a) a data processing agreement is required and b) where it would be available and c) that it is mandatory.

WordPress core does not use CDN by default, emojiscript is only included in very old subset of browsers, oembed is only used if embeds are published actively by user, which requires GDPR notifications and other data processing agreements anyway.

Instead of censoring these impotant hints, better do some interviews with leading EU GDPR lawyers and publish the results.