> More to the point, if a law is passed that says "all browsers must do X,Y and Z". How to you enforce that in a world where open source is so prevalent?

Easier to enforce it on browsers than EVERY SINGLE website that uses cookies for tracking, no?