There are some interesting points here. It's really about the exchange of data to US servers that seems to be the problem, as Google is obliged by law to disclose data if asked for by the U.S. Intelligence service. Do you believe they will fix this?
They should fix it if they want to become GDPR compliant. If they don’t fix it, they might loose a huge amount of customers over something that’s fixable.