GDPR is rarely enforced, we are still In a transition phase and many who start out choose to just ignore it to a degree.

I don't see how it's more costly or less profitable. Judging by the amount of lawsuits per capita I think it's way more likely to get sued in the US than Europe. And guess what's more expensive or complicated for a European company?