There should definitely be a standard API for this stuff by now allowing browsers to control the cookie experience. Maybe we're moving in that direction, I'm not sure. I think there was a feeling the law would be rolled back so there was no major push to standardise things