I feel this and as a German company, we have our stuff hosted in the EU. But where it becomes pointless to have the host in the EU, is when Cloudflare is a requirement. Since we expose ourselfs through their certificate, we might as well host with a US company. And I’m not aware of a EU Cloudflare competitor with similar WAF offering.