So maybe the legislation should be that you have to pass a "internet operator" test to get a license that ensures you have the awareness and the skill. Because even if the current law protects you from GA, there are tons of other companies doing the same things and have no intention of stopping.

Better to protect the people from all the bad companies, not just the ones who do business in the EU, right?

Sounds like protecting the people by leaving it to them, and (somehow) restricting their internet access if they haven't passed a course in internet jiu-jitsu.

And no: the GDPR isn't just about GA, and it isn't just about the internet; it's about any personal information.

Ad-blockers and JS-blockers are essentially technical solutions; but you have to know to install them. If they were integrated into browsers (and defaulted to "on"), that would make privacy less of a technical matter.

If the large news outlets took a couple days to educate people, they’d know how. It’s not that complicated.

If you buy a gun then you can shoot the guy who robs you, so the robber doesn't do anything wrong.

More analogous to locking your window, so the robber can’t get in to do wrong.

Why is breaking into peoples' homes illegal (and prosecuted) even though anyone has the ability to lock their window?

Maybe because the two crimes here are (1) breaking and entering (you have to actually break something) and (2) theft. If the window isn't locked, then you don't have to break in; you can just open the window.

It's not against the law to just walk in; or rather, it's the civil offence of trespass - you can sue the trespasser for damages, e.g. causing wear on your expensive carpet (but you'd have to produce evidence of monetary damages). And you can physically remove them, perhaps with the help of a bailiff. But the police won't help with common trespass - it's not a crime.

[Edit] At least, that's how I understand the law here. IANAL.

Locking your windows is a common knowledge, the details of technology are not.