I disagree strongly. "...cascade delete is only easy if you’re a very experienced programmer or who knows what he’s [sic] doing." No it's not. Nothing could be easier than foreign key constraints & cascade deletes in a relational database. It's literally "built in."

If you're a garage-startup, you're unlikely to be slapped with fines under GDPR. Let's be honest- if you're a garage startup you're lucky to be noticed by anyone, much less European regulators. The argument expressed here is sleight of hand: complaining about the supposed impact on "the little guy" when the regulations themselves are designed to target Facebook & Google (among others) specifically.

The regulations are not that complex, they just require a new standard of respect for users, one that we should have always had as an industry. The fact that we had to wait for regulators to force this on us is our shame, no one else's.