> Fortunately, they can’t actually enforce this, so I’ll be ignoring it, just like I would for Saudi Arabian anti-blasphemy laws.

Yes! That is exactly the right position to take as a US company!

Anyone claiming differently is most probably peddling snake-oil in the form of "GDPR compliance".