Your reality differs violently from mine. We're not four years into the GDPR becoming enforceable (it was just last year), and certainly not enough time to see

Your reality differs violently from mine. We're not four years into the GDPR becoming enforceable (it was just last year), and certainly not enough time to see real action for complex cases - regulators and courts move slowly. Startups barely ever asked for consent, and collect way more data than you imply - including, as you mention, by using Google Analytics. The GDPR requires zero banners and checkboxes if you are not processing data.