https://developer.mozilla.org/en-US/docs/Web/Security/Subres...
Neither is widespread. Leaving users, especially vulnerable ones, to the whims of businesses.
Privacy isn't a "technical matter".
Better to protect the people from all the bad companies, not just the ones who do business in the EU, right?
And no: the GDPR isn't just about GA, and it isn't just about the internet; it's about any personal information.
It's not against the law to just walk in; or rather, it's the civil offence of trespass - you can sue the trespasser for damages, e.g. causing wear on your expensive carpet (but you'd have to produce evidence of monetary damages). And you can physically remove them, perhaps with the help of a bailiff. But the police won't help with common trespass - it's not a crime.
[Edit] At least, that's how I understand the law here. IANAL.
Well, carry on and load it, it's your server.
Oh, wait, you mean you want ME to load it, into MY browser? That's a problem - my browser only loads JS from the origin server, and only if I give it explicit permission.
As a developer, I deplore the use of CDNs to serve javascript libraries; you don't know what the CDN is going to serve to your users, it could change without warning and break your site.