GDPR vastly increased potential attack surfaces (people taught to click consent buttons without reading, easier fishing - click to login to update your personal information, data portability - scammer can more easily extract personal data by impersonation and much more) and provides false sense of security. It only benefits civil servants and large corporations.