Yup, more so with GDPR. It is nobodies business who's behind a domain. Authorities can of course figure it out (with subpoena, as it should be) should the need arise.