I understand what they are doing and it is fine. The hard opt out is not to consent and to navigate away from the site. That's fine. The second opt out is to

I understand what they are doing and it is fine. The hard opt out is not to consent and to navigate away from the site. That's fine. The second opt out is to withdraw consent. Obviously this means that you consent but are free to withdraw your consent as a later date. Which is what the GDPR requires, and that's also fine.