>GDPR says no.

GDPR isn't infallible. The EU and its individual countries have plenty of controversies.

>ton of challenger new banks.

Ton is a gross overstatement. It's a few that are truly independent from anyone else. The remainder are puppet / daughter banks.

Their existence barely influences the status quo and it certainly doesn't prevent outrage whenever banks used by over half the country's population threaten to fall.