Comment by jampekka

Yes. My diagnosis that this is due to bad enforcement and the refusal to make or stick to clear enforcement criteria. This lead to the deployment being that companies are as maliciously compliant as possible, with the criteria evolving as a loophole whack-a-mole with 10 year iteration time due to enforcers and courts dragging their feet.