There's not really too much need for caution; they are just saying the GDPR doesn't apply to them and they would rather not deal with any issues. I do the same

There's not really too much need for caution; they are just saying the GDPR doesn't apply to them and they would rather not deal with any issues. I do the same thing with many sites I manage, it's significantly less potential hassle.