I am not a expert or a lawyer, but I believe user actually hold the right to completely erase personal data:
The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay
https://gdpr.eu/right-to-be-forgotten/
Note the word "erasure" as opposed to "anonymize"