The GDPR goes far enough and even prohibits dark patterns and annoying the user into accepting. Making the "decline" option harder to find is not compliant for

The GDPR goes far enough and even prohibits dark patterns and annoying the user into accepting. Making the "decline" option harder to find is not compliant for example. The problem is a chronic lack of enforcement that allowed websites (and entire companies such as TrustArc/etc) to implement these malicious pseudo-compliant solutions and get away with it, at the expense of everyone's privacy and sanity.