[someweirdperson]

A websites using wordpress got fined for including google fonts. Not the organization that provides wordpress using google fonts by default.

Likewise, a company using O365 to store customer or employee data will get in trouble, not Microsoft for offering that service.

[aliqot]

That's not what's being discussed. My comment asserts with certainty that a small business will never be punished as leverage against the upstream big corp.

[almostnormal]

It's not Microsofts fault if customers use it to store GDPR relevant data. It's Microsofts customers using them as an external data processor. It's the companies that are using O356 for such data that will get fined.