Not a lawyer, but I've implemented GDPR compliance frameworks and worked with the lawyers closely on a number of these subjects.

The WP DPO is correct. Messages like this are absolutely not covered by GDPR.