There is a kind of naiveté, also at EU level, where people think that once it's a law, bad actors will just fold.
They minds are somehow unable to comprehend that only the good actors will fold and only bad actors will be left.
Other examples are: Firearms possession, supply chain law regarding human rights and child labor.
I was really excited for GDPR until I realized Europe had no intention of actually enforcing it :-(
Actually, southern europe seems to have understood that it can be quite a good business fining US megacorps billions and billions. Northern european countries do very little except symbolic wrist slapping.