Core Salesforce is a company data store often requiring human data input. It’s where your information goes when you fill out a “Contact us” form on somebody’s website.
If the starting table stakes to get started becomes GDPR-style compliance infrastructure that takes 3 engineering man years to implement properly, then new companies will happen less, which means less future competition for the incumbent.
It's using the legal system as a tool for their competitive advantage -- force everyone to do the thing you're already doing.
> Are those things we want other companies to be doing, though?
Apparently if someone got successful doing something bad once, we're supposed to be OK with people doing that bad thing forever, lest we risk some "regulatory capture" boogeyman.
The solution to regulatory capture is an actual solution to regulatory capture, not a general aversion to regulation.