GDPR gives sites a choice: either stop doing shady stuff, or ruin the UX. If a site's UX has been ruined, that's because the site has specifically chosen to kee

GDPR gives sites a choice: either stop doing shady stuff, or ruin the UX. If a site's UX has been ruined, that's because the site has specifically chosen to keep doing shady stuff. Blame the site for being shady. GDPR is on the side of the users. Note that GDPR doesn't say things like "cookies need a consent form"; rather, it requires that data processing is only performed if a certain valid reason is given. One valid reason is that the service offered by the site couldn't be achieved without the processing. That's fine. If something's not required to perform the service (i.e. shady stuff), the only valid reason for doing it is if consent is given; hence the awful forms.