Or is it just a knee-jerk reaction to GDPR that some non-EU companies have adopted and has now stuck?
I didn't see anything out of the ordinary in what was filtered so it's probably just knee-jerk.
As a British firm they specialised in advising non-European firms on whether to and from where to get GDPR advice.
In essence their process was to woo client with quick turnaround, get whatever books they could, determine how much money the client was making in the EU + a super rough estimate of likely growth, and return one of roughly a dozen canned answers.
Whole thing was taking them less than half a days work per client per two person team.
The kind of company that takes advice like that isn't likely to review the policy anytime soon.
It's probably not worth it for them.