The word choice of citizen vs resident is a red herring. The issue is the extrajurisdictional reach of the law.
An EU resident visiting" your business which is hosted and operated in the United States, is the same as a Saudi Arabian coming to the United States to buy alcohol.
This is the reason why the GDPR requests an EU designated representative, so there is someone to charge locally.