Then again, the very same people complain about GDPR not being technically super specific.

At some point we have to accept the pattern. People with ideological objections against any limits at all will try to frame any regulation as stupid, regardless of what is in it.