Most cookie content popups and forms that you see are also flagrantly illegal under the GDPR. The problem is that enforcement is rare and small scale compared

Most cookie content popups and forms that you see are also flagrantly illegal under the GDPR. The problem is that enforcement is rare and small scale compared to the overall scope of the problem. In both of these cases it's a day late and orders of magnitude short. The Schrems II stuff is a situation where many of the politicians and the businesses really don't want to have to do anything and so they just kinda ignore the law until privacy advocates force their hand. So enforcement is effectively non-existent; the hope being that they can just run out the clock until some sort of legislation magically fixes the issue.