Gust interview questions

Applied for a job that seemed a little too good to be true in January. Didn't hear anything until a month later when they sent a coding challenge to all of their candidates at the same time. The coding challenge was a public github repo which contained instructions that changed at least twice after the task was originally sent out. Candidates who completed the task too early for the first set of changes raised PRs that were publicly visible, leading to at least one instance of what I believe was plagiarism. When I applied, I was under the impression that the role was a mid/senior role but a number of junior developers had also applied. The coding challenge itself turned out to be quite simple and seemed to have been designed to be easily reviewed: every candidate would work on clones of the same repo and typically code changes were made in the same three or four files. After the first few code submissions, reviews shouldn't have taken much more than ten minutes each. I emailed to let them know that I'd finished the challenge and given them access to my repo. They replied the next day to say that there would be a bit of a wait but that they would eventually get back to all of their applicants. I waited two weeks before emailing to check if they had feedback but there was no reply. Two weeks later I emailed again asking for feedback. This time the CEO emailed back five days later, apologising and saying that I should hear back by the end of the week. The day after, the instructions for the coding challenge were changed again without warning. It has now been three months since I originally applied for the job and I have still not received feedback for the coding challenge. Personally, I find the whole thing deeply suspicious and wonder if Gust are using the code submissions they received for something other than recruitment as part of an elaborate scam. All-in-all I'm very disappointed that my time was wasted. As I live in the EU, I have made a subject access request and intend to report Gust if they refuse to comply with GDPR. I would advise other applicants who can to do something similar.