paulg is talking about Carta apparently used to email investors to advertise the existence of their new CartaX (Liquidity) platform. I don't know the contents of these emails, but I assume it was something like, "if you ever want to sell, ask your founder to opt-in to CartaX." I don't agree with this practice, and Henry apparently also said "sending marketing emails to investors is at best poor taste if not just wrong"[1].
In my opinion this case is a bit different, because not only are they apparently advertising Liquidity to investors, but Karri is saying they are trying to broker deals and close sales through back channels without the founders knowing or opting in to Liquidity.
Either way, in my opinion this history adds a bit of evidence to support this is a wider problem in how Carta employees treat data privacy.
1: https://nitter.net/MarwanRefaat/status/1357820073918910464#m