Step 1: cookies disabled by default.

Step 2: make it illegal to show ads without consent. Disabled by default.

And how really required are cookies for every webpage? I rewrote a friend's webpage from Wordpress to a static one, looks and acts exactly the same but needs no cookies and no banner. Because I've thrown out also the Google analytics - they're not selling anything so who cares (and if they will care, I'll add Simple Analytics).