I was linked to a post where witnesses were bickering about a significant proportion of witnessing happening by servers sourced (and resold) from one service provider in Germany.
Pretty shocking that no one addressed the elephant in the room. Seven weeks ago, I started an investigation into the legality of Steem. Now, with GDPR active, all I'll say definitively is that Steem is pretty much completely illegal and hosting this blockchain (with illegal data contained in it) in Europe makes you a criminal.
So, get out of Europe, start hosting in countries that don't care about human rights.
To developers and Steemit Inc, you need to build systems to comply with global laws.
That was for the witnesses. For the users of the platform - If you think Facebook is bad for "leaking" data, think about Steem. It leaks all data about you and everything you post, to everyone, at all times. There's zero recourse or appeal either. Feel free to post, but be careful what you post. If you care about privacy, leave Steem and look for a solution that respects your right to privacy.
I fully understand this is not a pressing concern. The authorities have far more important issues at hand than some tiny corner of the internet.