The problem there was that the GDPR was dumbed down by either the legislators behind it or the media to "the cookie law" or "the cookie banner", but nobody, especially not the decision makers, seem to have looked into it. It's a huge cargo cult, in that people put up the same banners they saw the early adopters do and think that's complying to the regulations.