This is very disappointing, and automatically dismisses omg.lol as an option for me as a researcher and educator.
> Article 3.2 goes even further and applies the law to organizations that are not in the EU if two conditions are met: the organization offers goods or services to people in the EU, or the organization monitors their online behavior. (Article 3.3 refers to more unusual scenarios, such as in EU embassies.)
https://gdpr.eu/companies-outside-of-europe/
Which is pretty much what happens given that they allow EU citizens to buy a 20 USD subscription.
If enough people do it they will act.
https://commission.europa.eu/law/law-topic/data-protection/r...
If one does not like EU law, one should just not do business here.