From my perspective, I would not call this action "swift and decisive", quite honestly: If he were making quick and decisive actions in the interest of privacy, then he would apply the GDPR features to every user.
"Facebook says that some laws elsewhere in the world conflict with GDPR’s new laws for Europe so they can’t be extended everywhere, and that the interface for some of these tools may vary"
But in all fairness: I am running into this very same issue RE: GDPR in light of some other compliance laws from the EU and US.