What concerns me when reading such articles is that if lying is so prevalent and there is still no action against the bad actors, then the GDPR tracking checkbo

What concerns me when reading such articles is that if lying is so prevalent and there is still no action against the bad actors, then the GDPR tracking checkboxes on many sites are likely also just sent to /dev/null? At least in my experience, one gets subscribed to many things they explicitly opted out from. It is very easy to say later if somebody digs to just say yes was clicked instead of no or there was a bug affecting a small portion of their traffic.