That doesn't sound right. https://docs.hetzner.com/general/company-and-policy/data-pro...
If you spin up your servers in EU locations they are under German ownership and EU regulation. Others, such as those in the US, are owned by a subsidiary and those are subject separately on the Cloud Act. Correct me if I'm wrong.
Do you really think German intelligence authorities don’t do what the US asks them to do?