That Netflix has offices in the EU[1] where GDPR can easily be enforced, while YC does not. Supposedly, the EU will try to enforce its own law on all the nations of the world, but I've yet to hear of a case where it does enforce GDPR outside of the EU.

EDIT: I remember there's also had the "requirement" for worldwide businesses to setup physical offices in the EU before accepting EU citizens as clients. I put "requirement" in scare-quotes, because I find that equally difficult for the EU to enforce throughout the world. Maybe, the GDPR will either apply only to those companies that have set-up physical offices in the EU and not the ones that haven't, or cause the creation of The Great Firewall of Europe to block out businesses that haven't set-up physical offices. I do wonder if some nations will allow this enforcement of foreign law by treaty.

EDIT 2: s/Realistically speaking/Maybe/. Realistically speaking, I have no clue how GDPR enforcement will play out.

[1] https://jobs.netflix.com/locations/amsterdam-netherlands