Came here to say that. I wasn’t covered by GDPR under spez’s site - but luckily their policies treated me like I was anyways.
I moved to kbin.social - which was probably the 2nd largest after lemmy.world. Also, it was Polish.
What I liked about that was - as per my understanding - since these are hosted in the EU, the GDPR applies to my data here even if I’m not the EU myself and am not an EU citizen.
A difference between kbin (and mbin?) vs lemmy (and pyfedi) - the former would show the entire name, including instance. If instance was not included, it was because it was local (so you could assume ‘@kbin.social’)
On lemmy/pyfedi the name shows up alone - though you can hover over and see the instance name. But at a glance I can see how someone could get confused. Not the best UX IMHO.
What surprises me is that these seem to be all on other instances - including a few big ones like just.works - rather than someone spinning up their own instance to create unlimited accounts to downvote/spam/etc.
I think piefed.social/pyfedi (which is slowly implementing support for all such objects) should get a mention here as well