It would be my understanding by taking the steps to switch living profiles to unlisted because of GDPR would be an acknowlegement by Wikitree that they are in violation. By retaining those profiles, Wikitree is then in direct violation by retaining the information.
It is my opinion we could save the living non members If we instead took the step of sending a bot to the living non member profiles to:
Erase or change birthdate to a decade.
Remove all biography information
Remove first middle and preferred names and replace with Anonymous or Living.
Remove the changes log related to each of these profiles to prevent these changes from being reversed.
Remove any DNA test identifies from showing up (GEDMATCH or Ancestry User Name, etc)
Furthermore,
When a new user is adding a new living member, first middle and preferred names should be automatically generated, births should be only allowed as decades and no biography should be created so that the user will not be tempted to violate GDRP rules.