Every law is a balancing act. I note your /s, but still think its worthy of a response because many people accept this without sarcasm.

GDPR prefers, in the grand scheme of things, the privacy and anonymity of 400M European to the bottom line of 50-100 companies, most of which aren't based in Europe.

Lack of privacy hurts & benefits ... who, exactly? Mostly the same (except it's more like 1000-5000 companies, but still).