Not necessarily. It's a seller's market due to huge demand, so prices alone may not be a good indicator of difficulty at this point.

It becomes hard when you try to get away with something that goes against the intent of the law.

And that is exactly what sites are doing now. And there is noone on earth that will ever believe it isn't deliberate.

If the GDPR was really intended to forbid business models which require collecting user data for ad targeting, why wouldn't it have just said that?

Just because X violates GDPR doesn't mean the intent of GDPR is to forbid X.

That doesn't follow. It's easy to follow the law, but because a lot of companies were doing things that were against the law, and given that a lot of companies put things off til the last minute, it took a lot of work to come into compliance.