Well they have to, regardless of account status. If they don’t, then as you say they’re in violation and therefore you can report them to your local GDPR bureau, which every EU country has.
You don’t have to sue Meta, the bureau has the authority to enforce compliance and give fines for every day they don’t. Dunno how effective it is against entities like Meta, but they’ve been in hot water in a couple countries already.
Ed: ok I guess it’s important how identifiable the data is. Monoliths like Meta do collect a ton of data which they technically can claim is anonymous… We’ll see how that turns out eventually. But email and name are definitely personal data.