A report to the ULD will also most likely only result in a slap on the wrist.
I actually did them a favor by pointing out their problems, because some german law firms use crawlers to detect GDPR and other violations. They then send cease-and-desist orders and collect expensive legal fees for that.