> So? The goal of the law is user data privacy and control. It doesn't matter if the abuser is Google or someone operating a site from their dorm, violation and misuse of user data is still the same.

The issue is that competition is a powerful consumer protection mechanism. A regulation that prohibits 15% of current hostile practices but also impairs competition can allow the major incumbents to be 500% more hostile to customers because the customers now have no alternatives.

It allows the incumbents to do all the bad things the law doesn't prohibit but they couldn't do if their customers had a choice.