Obviously this depends on the jurisdiction the website is complying with (e.g. US-only websites may not comply with GDPR), but since GDPR requires consent to be

Obviously this depends on the jurisdiction the website is complying with (e.g. US-only websites may not comply with GDPR), but since GDPR requires consent to be opt-in (cannot be assumed by default or have pre-checked consent boxes), I think a GDPR-compliant website cannot assume an [X] to mean the user is consenting to cookies.