anyone who can’t comply can’t serve you.

That’s not true. If the company isn’t doing business in the EU, they don’t need to comply with the GDPR. What I mean is, they’re entirely outside the jurisdiction of the EU and are not required to comply with any EU law. If the EU decides they want to force a non-EU company to comply, they have no ability to do so.