I agree with your second paragraph but I fail to see how the existing unused fields are somehow less dangerous or a “false equivalence” to a new unused DOB field which is significantly harder to use to deanonymize someone than their name, address, and phone number.

I’m not really sure you can argue birthdate is the thin edge of the spear when the standard Linux user database already had fields for location, email, phone number, and real name. None of which have been used for anything up to this point, and systemd-homed is not as widely used.

People who can’t operate a computer will somehow become gods at following instructions if someone calls “from Microsoft”