> So the indefinite retention would violate the GDPR? Sure, they can claim it's for legitimate purposes... yeah, right!

They already gave the way for Meta. As long as they have access to that data, they will turn a blind eye.