The malicious compliance is more that they all refused to add the one-click opt-out until a high-profile enforcement against Google brought them to heel.

that’s just noncompliance. and the one-click opt-out still implies one click, which implies the cookie banners