I get why people find this hard to believe, because it is kind of a crazy rule, but I repeat once again that this does not matter. Even if you have never sold a single product to an EU resident, and never plan to do so, the EU says as my original comment detailed that you are subject to the GDPR the instant an EU resident provides you with personal data.

(And of course, it's also the case that "selling to an EU resident" is substantially broader than "doing business in the EU" - EU residents do often travel to foreign countries and provide personal data to stores they transact with while there.)