I imagine once you're locked out of the account whatever that is, relying on GDPR will mean getting a lawyer and all that - by no means a quick or cheap way to

I imagine once you're locked out of the account whatever that is, relying on GDPR will mean getting a lawyer and all that - by no means a quick or cheap way to sort out your problem. GDPR will only be helpful after applying enough fines and lost processes, finally forcing Google/Stripe/etc to rethink their support strategy. Which means continuous hassle for today's customers and blaming GDPR for being "toothless" (blame set usually by the same people which claim the invisible hand would sort it out automagically).