And Australian law doesn't quite offer the same protections as GDPR. In fact, being a Five Eyes country, it's effectively the opposite.
I also have a feeling the Five Eyes agreement is about to end.
That's certainly possible, but as long as the servers are in the US, that's not really meaningful I think?