Replying to @pdwn
I know, I've seen it, it's progress, though the problem then becomes that what you can do under the refusal state is way too limited — much more limited than what Apple supports. This is DPA territory though, it can be fixed without changing the GDPR.