>User can easily refuse consent - go visit some other website. // GDPR requires that you allow users to access services without giving up PII unnecessarily on

>User can easily refuse consent - go visit some other website. // GDPR requires that you allow users to access services without giving up PII unnecessarily on an even footing with those who do willingly consent to being tracked. You provide an "accept all tracking" button (eg "ok"), well you can provide a "reject all unnecessary tracking" button too. You, the website provider, can easily not track users and not trade in their PII.