Spot on. Even when they've been caught doing things most people thought was shady (e.g., last year's /r/place manipulation), they tend to not outright deny it, but rather admit it and offer a half-assed explanation and end the conversation at that.
They wouldn't do something that flagrantly disregards EU/CA privacy laws. If they did it, they'd have have a justification they thought would hold up in court. If they had a justification that held up in court, they'd happily plop it in a comment that's pinned with a few dozen rewards and ignore any responses after that.