I give you my personal guarantee that it's not dodgy, and if it is, I'll be right behind you in a flash. o7
I think there is a misconception around, which is causing all the uproar. Namely, the difference between the EDR overlay in the game, and the EDR Discord bot.
The EDR overlay app does nothing but access the database to display info to non-registered users. For registered users it collects data from cmdr-to-cmdr combat related events as they happen, such as applicable system, scans, interdictions, shots fired, and kills, and forwards these events to the database. The database then applies a very basic algorithm based on a cmdr's history, to categorize them somewhere in the lawful -> outlaw range. This data is then in turn distributed to the registered and non-registered users.
Additionally it has some cool features like looking up nearest mats trader, telling you what materials should be available based on state of the system you entered, and also raw materials if they are above a certain % treshold in one of the planets (which is collected from Inara iirc, but don't hold me to exactly where it gets that info).
That is the EDR plugin for EDMC, and hence in-game feature in a nutshell.
The EDR Discord bot is similar, but you can more actively request information about other cmdrs by direct query similar to other bots around. The reply will give you some basic information on the cmdr, like their Inara profile (if one exists), the algorithm based lawful->outlaw category, and some newly added info on bounty history, ship history etc. Basically a snapshot of the cmdrs history and a qualified guess as to what their playstyle is.
Like all other Discord bots it needs
read access to the channel it is placed in for it to be able to see the user query. This is why you should always quarantine all bots in your Discord, unless you explicitly trust the source to a fault, to only the channels where it's absolutely needed. The EDR Discord bot is no different in that respect, as that's the entire principle of all Discord bots. Afaik it has however been limited to a select few Discords, and by application only, because it was never intended to be present in all Elite Discords as a look-up tool. It was meant for exactly what Jason alludes to in a previous post; fix the lack of cmdr history available in the game to give an indication of what legal status is most applicable to the cmdr in question based on their scanned history inside the game.
So, when discussing EDR it's atleast useful to specify which of the two it is, as they are based on the same data, but their behaviour and application is not.