[AndrewGaspar]

The easiest and cheapest answer is the status-quo, which is ambiguity on whether you're compliant with GDPR, so it's completely logical they would just block access.