>I don't know why they continue to stand by this massive breach of privacy.

It's worse than that, it's an obvious GDPR violation. But it hasn't been tested in a (european) court yet. One day, it will be, and much rejoicing would be had then.

It's also a shitty provision that it's not made clear when signing up for HN, as it is a pretty uncommon one.