I'm sorry but allowing anyone to display a GDPR Compliancy badge with no verification whatsoever seems to me like a complete opposite of the GDPR spirit.
This seems not in keeping with the spirit of GDPR compliance. When anyone can just display a badge without any verification, it only serves to obfuscate the issue. If a site is indeed GDPR compliant, there should be no need for a badge in the first place.