Exactly - Apple can still protect users by banning spyware from the store and applying the rules fairly (so including to themselves and other big companies). A

Exactly - Apple can still protect users by banning spyware from the store and applying the rules fairly (so including to themselves and other big companies). A trivial and EU-proof solution against spyware is to make GDPR compliance a requirement for App Store submission. The reason they wouldn't do it is because it would have to apply to themselves as well.