It is just bad UI. It could have been better implemented, such as with a browser-side opt out setting, for instance. Similar to what we have for permissions, for instance.
I happened to work with people who elaborated the GDPR rules and they knew very well that it would end with cookie banners everywhere, or mandatory logins.
