GDPR applies to all companies that provide services to EU residents.
Sure shady people will dream up all sorts of fancy money laundering schemes to make it looks like there is no transfers but those are already illegal as fraud on both side of the Atlantic with potential jail times.
The EU don't have to block any content to efficiently enforce GDPR against US companies trying to market profitably in the EU.
The EU GDP is about 75% of the US one, it's a huge market.