Yeah, I've wondered why everyone has been so late to the party. I mean, we have lived in a world with GDPR for two years now. Companies should have already been complying with it for two years. There was just a transitional period during which there was no enforcement.
Then there's all the GDPR expert blog posts, blasting the EU for not giving any leeway or transition periods. You were in it!