Hacker News Reader

They have no way to tell who is/isn't a citizen so just change your location to Frankfurt and voila, you're protected by GDPR!

GDPR applies to residents (of the EU), not citizens.

And I presume Facebook has so much data on you that a simple trick like changing your profile won't matter.