GDPR has turned into a joke due to lack of enforcement (partially due to Ireland serving as a "privacy violation haven"). For years saying "no" to tracking required many clicks, and I don't know of any companies that received penalties that would exceed the extra profit they made from that. Even blatantly illegal schemes where not agreeing locked you out of the web site usually didn't get punished.

Many sites still don't get proper consent, and also check out what many consider under "necessary" or "legitimate interest" cookies/tracking that you get after you said no. In hindsight, breaking the law was the only smart thing for sites to do, and many did.

Then, this bullshit. GDPR and the original explanations were pretty clear that the intent was to ban this kind of "agree or pay" scheme, and here we are. Of course they'll do it, because they win either way. Either it's considered legal, or there are no meaningful consequences...

This is not the only thing where the EU moves at a snails pace, ignoring that industry is making a joke out of well intended regulations. Many praise the EU for making Apple adopt USB-C. What they miss is that the attempts to standardize chargers started in 2009, when most manufacturers, Apple included, promised to agree on a standard, and then the EU let Apple dance on their nose flying loopings though loopholes for 14 years. That's right. Apple introduced Lightning after they were supposed to standardize, and the EU let them.