If I had the resources, I would establish an organization for privacy badges for products. From "absolutely anonymous", through "necessary violations of privacy for function" till "unnecessary harvesting of data". Till such an organization for handing out badges will exist, it will be a hard task to buy any hardware and being able to trust its privacy.
Reality is different, but NGOs can in theory sue to make reality align better with the intent of GDPR. NOYB (https://noyb.eu) is supposed to be such an NGO, and they seem to be doing a decent job so far, although they're limited in what they can do with their resources, facing a never-ending wall of vendors that blatantly violate GDPR.