here's a thought experiment:

1. send them a legal notice that you do not authorize the collection or use of their information

2. remove the enshittified terms of service from the program, as authorized by the copyright license, but leave the data-snooping malfeatures in place, sending them the data that you have not authorized them to use

3. sue the hell out of them for using the data without authorization, until they implement, on their side, as they should, code that refuses to accept data that hasn't been formally authorized through explicit registration, opting in and consent, as opposed to by presumed adherence to terms of service

CC: @OdyX@framapiaf.org @highvoltage@pleroma.debian.social