The sites themselves disagree with you. They think there's risk, which is why they decided to not work in the EU. EU does not "threaten very high fines" to sites that do not collect PII. GDPR does nothing if you don't collect information. But they obviously do collect it, despite your denial.