This is a very inaccurate view. I’ve worked with multiple SMEs and no such “complexities” ever become operational challenges. Even as a indie developer, my compliance is a default provided I’m not trying to do something shady.
Looking into the EU regulations, in most cases what they want you to do (or not do) is common sense.