Addictive designs and social media have changed a lot in the last 10 years, for one. But more importantly, there's no statute of limitation on making laws.
Of course the GDPR gives individuals rights, counter example:
> The first application of the GPDR was to remove links about Barrosso's personal history from Google.
The fact that all of these companies aren't European certainly doesn't help, but if you think this and GDPR, DMA etc. are purely schemes to milk foreign companies then you've been drinking way too much cynicism juice.
In the UK at least, the GDPR was incorporated into UK law (where it remains, essentially unmodified, even after Brexit). So it is certainly not necessary to get the EU commission involved to enforce the law. In the UK, the ICO is the relevant regulator. There are other national regulators that enforce the GDPR, such as the French CNIL.
The EU realized they can extort the US big tech. The EU will now just focus on laws and taxing (the war in Ukraine isn't their problem). And frankly, we should just ignore EU laws in the US.
I think you are projecting values on entities that don't share those values. I don't think they'd have any problem destroying a pile of companies and not enabling replacements; they are not pro-business, and they have not shown a history of regulating in a fashion that's particularly designed to enable home-grown EU businesses. Predictability and consistency of enforcement are not their values, either. They don't seem to have any problem saying "act in what we think the spirit of the law is, and if you think you can just understand and follow the letter of it we'll hurt you until you stop".