@p
They'll just lawyer a way that gdpr covers, for example, my single user instance in the US, but not their 10k user instance owned by a guy in the EU and hosted in the EU.
I've found that the vast majority of people have never read a statute. They just assume that whatever they think is fair and right, just so happens to be what the law says, because why wouldn't it?