Yeah, same thoughts. The gdpr didn’t change much but made small companies like these more vulnerable and web browsing more unbearable. Data is still getting collected and big companies don’t care.
You may be using a slightly expansive definition of 'small company'.
You do know that GDPR fines scale with revenue?