And what most websites doing is actually not allowed according to the GDPR, it's supposed to be a one-click opt-out (which would be easy to automate with a browser extension). Unfortunately, the relevant court is in Ireland, which is the EU's hub for US big tech.