The GDPR is in favor of "opt in". It doesn't eliminate the option either, it just makes sure that people are allowed to make informed decisions about their data.