I'm not sure they're complying even with the letter of the law. Many cookie banners I see, require several clicks to deny anything but those they don't have to ask me about. And in most other cases, the accept button is significantly more visible than the deny one.

If that's actually allowed, yeah, bad law. If it's not… well I guess we can hope prosecutors will prosecute. Though I'm afraid we won't get much more than hope…