There should have been a standardized way for a browser to respond in exactly the way that these plugins behave. Basically "allow only functional/minimum cookie

There should have been a standardized way for a browser to respond in exactly the way that these plugins behave. Basically "allow only functional/minimum cookies, never anything else". Regulators of course should enforce the simple fact that this is also a requirement for anyone who dismisses a consent popup, has a browser setting that suppresses it, or even someone who clicks the biggest most obvious button - since all those actions (or non-actions) must result in "no consent".