I experienced the same thing. I wonder if this qualifies as "explicitly blocking EU residents", since someone taking privacy measures (like using uMatrix) wouldn't even receive the message.

If this is the case, then perhaps javascript is not the best place to put the EU blocking functionality.

Such a person would just be considered a "hacker". (The law doesn't care if real hacking is necessary, they go by how a typical person would experience things.)

I'm going to offer a full website proxy service for a small price so the external JS isn't needed and hopefully these cases can be mitigated.

But surely it is dubious (another reason to fear and dislike the GDPR as it is) if a visitor is actively bypassing website contents and features - effectively changing the website - and that makes the website liable.

It's like if I have a browser extension that rewrites landing page contents to racial offenses, then I browse landing pages, get offended by them all and sue the websites.

It should be possible soon to build this as a Cloudflare App using Workers, rather than needing to build your own proxy service.

Shh! That was my idea. Don't tell other people about it.