Sure but they’ll just outrun regulation and find ways around it. This is even a problem with the App Store now when it comes to technologically sophisticated companies, but there’s a balance because if they’re too aggressive Apple will give them the boot. Once XYZ Tech Company has its own App Store it’ll be able to hide more nefarious activity, create legal fictions to avoid responsibility, and hide how it circumvents GDPR. Using the third-party store might require consenting to location tracking even. So users who want to use XYZ app will agree to a bunch of terms and conditions before being able to even use the app, and then it’ll just be open season.

I do not trust GDPR to handle this effectively. It’ll be like a lion trying to squash ants, and now there’s no single company that the EU can go to and say “fix this”. Apple will say “not my problem”.