As a European, I honestly don't see a difference between the US and China from this perspective. They are both equally untrustworthy in my book.

As a Western European, I see the same untrustworthiness in Europe.

We just have our personal privacy security theater in the form of GDPR and a feeling of moral supremacy that's been drilled into our heads from primary school on.

GDPR isn’t theatre in many organisations. Yes large tech firms (mostly US) probably ignore or circumvent. But most businesses I’ve worked for have taken concrete steps to reduce the data they hold and consider how it’s being used asa direct consequence of gdpr.

Don't understand why you are downvoted.