Of course GDPR is a well intentioned law. It's implementation is debatable though, and you're basically asking people to not talk about its problems.
On the contrary. I'd love to talk about those problems, but this isn't one of them. Data Subjects should have the right to make Data Subject Access Requests. But the context matters.
If you want to really talk about the GDPR's problems then I think it would be better to focus on the Designated Representative bit, which is prohibitively expensive for small companies.
So you realize that this is a problem, but you'd rather not talk about it?
Context matters, but the law should codify the context, and not leave it up for interpretation.
You have a very US centric view of laws and legality, this is not a US law so please try to shift your viewpoint to the EU way of doing this and then re-interpret.
You should also look at the whole thing from a US perspective before calling people with a US centric view "dumb".
Where did I do that?