I guess the reason people are scared is that GDPR is the first legal text they ever came into contact with. These are really common legal terms which have huge numbers precedence attached.
I've read plenty of legal texts and many are far more precise than this. Think tax law, for example. GDPR is certainly not the first. Yes, it's not the only example of vague law, but it's fairly unusual in its international scope, the size of the fines and the sheer absurdity of how many words it uses to say so little. At least compared to Anglo law.
I guess the reason people are scared is that GDPR is the first legal text they ever came into contact with. These are really common legal terms which have huge numbers precedence attached.