On a technical front it has influenced their hardware decisions, forcing adoption for example of MACSec, adding some minor capital cost. Mostly though the cost has been in the resulting data sovereignty laws forcing them to set up sovereign clouds in places like Germany, UK, Canada, etc. I can tell you this makes a real mess of things - you can't share your management infrastructure or anything across the infrastructures. In Germany you are using remote hands to do everything because they have to be Germans. Etc.
My understanding based on actual reports from people is that the companies you speak of did not go to MACSEC, but did start doing host-to-host IPSEC, as well as L1 AES256 encryption (not macsec).
Agreed with the balkanization of the clouds/infrastructure.
