Earlier quoted context omitted.
Why do you equate technology startups with startups that finance themselves with private data (mis)use? Instead of taking profit out of private data one has, it's possible to charge for the service. Alternatively, one can use the data to finance the business but also follow the rules and regulations. I don't see the big issue here.
Why do you equate startups with startups that finance themselves with private data? Every piece of regulation is another headache for a business. Take for example the combination of GDPR + backups. If you have enough technical manpower, you can change the backups. If you have enough legal manpower, you can argue that changing those backups counts as 'unreasonable'. If you have neither you have a headache. Don't forge…
Software projects like apache2, nginx, or your favourite website framework should adapt to the GDPR to make it easier for those who use them.
How things will turn out is not settled yet. If you are a small company not focused on handling private data, and documentedly continuously work on compliance, then I see little you must fear.
Usually, if your business is handling private data of others, then you must simply know exactly what you record where, and what you don't record. That is an essential part of your business.