GDPR explicitly exempts government entities. Still, way better than not having it IMO.

Regulating governmental intrusions into privacy would take a completely separate and probably much larger bill.

Tor.

And the correct term is anonymizing proxy. Having the term VPN overloaded to mean two completely distinct things is rather annoying and/or confusing.

I’m fairly sure I’ve seen an NNTP based imageboard that distributed it’s content through that protocol and different instances had overlap of boards. That’s about the closest match to federated system you’re going to find with this model I think. Interesting concept. Not something I’d want to interact with personally though.