I was thinking about the USA in my post, but if the GDPR protects against this then that's great. I've also seen mention that in e.g. Germany the standard EULA is basically illegal (or at least unenforceable) because you can't reasonably agree to it.