> The law applies if you target people living in the EU

I disagree with this. Tencent WeChat targets the entire world, including people living in the EU. They do not follow GDPR.

Likewise, Facebook targets people living everywhere, including in China. They do not follow Chinese laws.

Hence, China sets up a firewall and blocks Facebook.

EU can set up a firewall too if they don't like something.

"Oh but EU doesn't do firewalls?" Not my problem. Tough luck. China, Iran, Turkey, Indonesia, all did it, you can too if you have beef with foreign websites.

But no, I do not need to follow EU law just because EU users use my thing. It's on them to firewall it if they don't like my website.

> CCPA and the CPRA

This is fine. I live in California, I need to follow California law, and I can choose to live somewhere else if I don't like it. What I'm not okay with is some distant jurisdiction thinking they can make laws that I "need" to follow.