How it works within the law
Under Article 20 of the GDPR you have the right to receive your data in a structured, commonly used format and pass it to whoever you choose. I work with the username and password of a real, authorised user that you provide, doing automatically and in bulk what you could do record by record. No passwords are cracked, no vulnerabilities exploited, nothing is accessed without permission.