The website of the German federal tax office is not GDPR-compliant:
https://twitter.com/jdvhouten/status/1488481039630704644
Seems premature to sanction private businesses when EU governments have not yet been able to come fully into compliance. Perhaps the changeover is more difficult than anticipated? As others allude below, it might make sense for the relevant EU-based alternatives to come online/scale up.