Sure, I agree with the article. Sure, the EU is way behind here in implementation, and the privacy stuff takes (IMHO) a bit of an absolutist position. But then we ask ourselves, how many people do actually turn down cookie banners (well I do, but still)
As a start, not even the US gov trusts their vendors, that's why there's FedRamp and such. It's a detailed procedural and deep certification.
Is it safe to have your stuff in a US cloud vendor? Well, which stuff? Is it safe to have it in a server under your desk? Probably less safe in the end
Which countries have actual specialists in securing data? (hey didn't the USDS just get shut down?) Which countries actually implement those security guidelines? (Or just general best practices?)
tl;dr: SNAFU