I also asked myself the same question. What I gather from the answers here is that browser vendors are to blame for not providing a mechanism. The law only says

I also asked myself the same question. What I gather from the answers here is that browser vendors are to blame for not providing a mechanism. The law only says there's got to be explicit opt-in, but not the mechanism.