There's nothing in any of the relevant EU laws forcing websites to have consent banners. They could simply handle consent like mobile apps are supposed to handl

There's nothing in any of the relevant EU laws forcing websites to have consent banners. They could simply handle consent like mobile apps are supposed to handle permissions (i.e. prompt once for a single purpose when it becomes relevant for a user interaction). But they want to shovel a ton of trackers and tracking ads and analytics and other garbage into every page load, so they need to obtain consent before those can be loaded and then they try to be clever (read: illegal) and trick you into giving them a blank check by making it harder to opt out and continue than to opt in to everything and give up. There's also nothing in the law saying the cookie banner has to be a modal dialog. The same sites happily went for actual "banners" rather than popups when the first EU cookie law was passed and only required notice rather than consent. They only went for modal popups because this forces users to make a choice before they can access the content. Ironically, if a data protection agency were particularly spicy that day, it could be argued that putting a site behind a modal consent popup rather than defaulting to opt-out and merely informing the user about other options violates the GDPR's requirement not to make the use of a website conditional to unrelated data processing because the popup is intended as a form of light coersion.