In order to reply to your questions, the mark would have to study the GDPR one way or the other to answer them.

That by itself is way too much hassle.

Well, yes, if someone has no idea what's in GDPR they're probably going to be more fearful of all the bullshit being spread about it.

Well the burden of proof lies on the person who makes the claim. otherwise it's an unsubtantiated claim that can be discarded without evidence.

It would certainly be interesting to quantify how much money has been spent just trying to understand it