I agree the answer does not depend on the legitimacy, but that doesn't matter. The answer to where were you last Tuesday night does not depend on who asks it, but only some have the right to ask that question and demand an answer.
I guess there in is the disagreement. Is the request more like one case or the other. It seems that most people feel the intent of the law is (or should be) to allow users to request information no, not any unrelated third-party
Indeed, but the experiment wasn’t about requesting information, it was about requesting their policy around handling user data.
Seems reasonable to me - for example you’re a prospective user and want to know how they handle requests, just in case you want to do it in the future after being a user.
Which is itself a request for information. I think a request for policy information is reasonable if they they didn't make up false identities and claim to be users.
