99% of the people just click accept and go through.

This could be solved on the client side, by requiring all devices with browsers sold in EU to have separate cookie jars per domain and by default those cookies would be deleted on window/tab close. If you wanted to stay logged in to a site, you'd click a button next to the url bar that says "keep cookies for this domain", and be done.

Cookies have literally nothing to do with GDPR or the ePrivacy directive. It is mentioned I think twice total in both documents as an example of how user data is persisted and tracked across domains, but ultimately the mechanism is irrelevant.