That comment was not inspired by mistrust of the State. (I would trust the average European government far more than I trust my own.) I'm saying that private firms will use this ready-made excuse to intentionally exceed the limits placed by a straightforward reading of GDPR.