DuckDuckGo is a single company operating in a single vertical and their entire purpose was to provide a certain type of privacy-preserving service.
The vast majority of companies aren't violating privacy in any meaningful way, and the GDPR still imposes large costs on them.