Most of the cookie banners are breaking GDPR. The requirement under GDPR is that privacy must be the default and users can select to opt in. So most of the banners you come across that default to all tracking are against the law already. The legislation didn’t stop them being annoying in this way but a few prosecutions for the breaches and dark patterns would set things off on a better path.

Yeah I’ve been saying this to people. Don’t get mad at GDPR, get mad at companies who harvest your data