Your friend is right that it's complicated. Tax authorities aren't stupid, and those platforms generate paperwork that sooner or later gets cross-checked, especially once your income starts becoming serious money. Fines can be 50% of what you didn't declare, plus late-payment penalties, and if they see it as deliberate fraud they can go further. Plus, if you never registered as self-employed, they can also come after you for social security contributions. Eight months without declaring isn't the worst thing out there, but you're already in risky territory.
The practical thing nobody usually mentions: before you officially register, check if you can qualify for some transitional tax scheme or if there's a tax amnesty in place in your autonomous community. Some regions have programs to regularize small income without such harsh penalties. Call a tax advisor (it's not expensive for these cases) and tell them the situation straight. A lot of advisors know how to minimize the damage if you do it voluntarily right now instead of waiting for the tax authorities to find you.
What you shouldn't do is keep going as you are. The risk goes up every month that passes, and in a year you'll be sweating every time you get a weird email. Registering now as self-employed, declaring what you made in these eight months (even if it's approximate) and starting to issue invoices from here on is annoying but way better than the alternative.