Has anyone even looked at the PR? Why is there such a big stink about adding an optional birthday field to a JSON schema? It's opt-in and can't be validated in any way.
That's like saying OpenSSL is the thin end of an anti-encryption wedge because they provide FIPS compliant modules. Or complaining that it puts your privacy at risk when you generate an SSH key and it asks for your address.
The problem is the laws getting passed, not with software that gives people a choice about whether to comply.