> where the publisher actively does not want to protect the readers privacy

You don't know that. They may take privacy very seriously, but don't see any point in risking possible GDPR issues, especially if they get no income from people in Europe.