The problem is GDPR isn't prescriptive enough. That makes it ripe for "technically correct but really annoying" solutions.

It also failed to actually ban ad tracking.