I'd wish there were movement for the privacy-conscious services to escape any regulation, not just choose the currently-politically-correct one. Like piracy sites did in 00-10s (abuse-proof hosting in Ecuador, shady domain registrar from SEA, zero search indexing) or crypto companies now (net of shell companies where not a single one is responsible for anything).
My point is, if you trust the company you're using, also trust it to use any means necessary to protect you from bad actors, don't rely on the laws here. Both the corporate and the state ones. If you don't trust it, don't give it anything you cannot afford to leak or lose.
Specifically, EU data protection laws are good to protect regular customers from the big corporations, but they offer little protection against the EU (and the member states) themselves. And if the risk you're hedging against is "yourself turning to big corp and abusing customers" moving to EU is okay, but not in any other case.
My point is, if you trust the company you're using, also trust it to use any means necessary to protect you from bad actors, don't rely on the laws here. Both the corporate and the state ones. If you don't trust it, don't give it anything you cannot afford to leak or lose.
Specifically, EU data protection laws are good to protect regular customers from the big corporations, but they offer little protection against the EU (and the member states) themselves. And if the risk you're hedging against is "yourself turning to big corp and abusing customers" moving to EU is okay, but not in any other case.