Definitely small-medium SaaS/consultancies based in the EU. You can't really "skip all of this regulatory nonsense" if you have customers asking for DPA's.

But yeah more of "brand trust" problem than a product problem type of business