Therefore, it's not worth any staff or contractor time to figure out what GDPR compliance would mean. Maybe they're GDPR compliant today. Maybe not.
But it's pretty understandable why they might choose to simply geo-block the EU to send a clear signal that they're not marketing to the EU. They can't keep EU residents out of their site but this approach would seem to be a pretty good low-effort approach.
While at odds with the value of the internet, it is understandable that they decide that their business isn’t really in global news/reporting to international audiences and GDPR is a reason to focus on what works better for them. Before then it was purely incidental.
Remember when the web just worked?
I don't think there's ever been a time where incorrect webserver configurations like that were impossible to make.
Why do I need an https connection to read a newspaper?
It prevents anyone between you and the newspaper from inserting some js to turn your machine into a cannon targeting someone else.
"Need" may be a bit strong, but there are positive security externalities.