Money is the only thing the law is about, not privacy. Even if you disagree with my opinion that it was designed to be this way, there’s not really an argument to be made against the suggestion that all it’s accomplished is periodically fining foreign service providers (plenty of fines to EU businesses too, but there has never been and will never a large one).

If it was designed to protect privacy, it is very clearly failing to achieve that objective.