Not because of the law but because those pushing tracking and designing the banners intentionally make them intrusjve. Purely technical cookies (eg login, spam protection) don't need a consent by the user.