I think the author is overreacting, to be honest. What’s wrong with having client-side interactivity? There’s no possible way that would fall afoul of GDPR.

klong doesn't have a toy interpreter. It was likely processed server-side.

Still, if that would execute and throw away, like most of them do, there is still nothing gdpr relevant.