Ok i get that the goal is to sell your phone and the research is very useful (thank you!), But what about legal actions? What can affected users/ orgs do about this? Looks like a case for a massive rgpd fine, no? How to do that? Who can start that?