I'm not convinced.

The GDPR can absolutely be applied to foreign companies https://gdpr.eu/companies-outside-of-europe/ but even if it couldn't, Facebook is an Irish company specifically so they can avoid American taxes. I do not think the EU will have any problem with jurisdiction.