They never could – just read the effing policies introduced by the US long, long ago. Some people just didn‘t want to listen/read/think. That‘s our post-factual world and I hate it so much.

the good news is that Heise, as a sovereign, can guarantee to sell your visitor data securely, wether you pay for a subscription or not.

I really don't understand why actual guarantees can't be given.

Even though Microsoft is of course subject these US laws and there's a continual risk that traitors within the US part will extract data, presumably many individuals-- French citizens, non-citizens present in France or the EU, etc. are also subject to French laws and within reach of extradition and could be tasked with reading through any code or similar to ensure that no central mechanism that would allow unauthorized information retrieval existed.

Because obviously any French citizen or person physically present in the EU participating or having knowledge of request like this and not stopping it would be committing some kind of rather serious crime, probably one that's much worse than not co-operating with a warrant.