Maybe it's just me, but I'd rather have my government defending my (and most citizen's) interests (with laws such as GDPR) rather than a private company's rules

Maybe it's just me, but I'd rather have my government defending my (and most citizen's) interests (with laws such as GDPR) rather than a private company's rules which, as evidenced by this article's existence, have pretty big "collateral damage".