What you describe is illegal in Germany. You can’t just request that information as an ordinary person.

So even if you deny the residents registration office to reveal your data, what your friend has done would still work if he called someone who didn’t care about privacy.

Registration offices in Germany can share data under certain circumstances, for example with political parties so they can mail their advertisements, or with churches if you’re a member of a church.