GPDR doesn't impose rules on companies under EU jurisdiction. It tries to impose rules on all companies everywhere. The blog post is written by an American.

The rest of your argument reduces to "all regulation is good" thinking. I haven't made any arguments about regulation in general. However, passing a law so vague there are continuous arguments about how it affects backup strategies and attaching a 10-20 million euro penalty to it is absolutely a punishment out of proportion to the severity of the "crime" (which is itself not even remotely close in severity to polluting a river - which one has the chance to actually damage somebody's health? not data processing!).