> simply ban
When you're up against billion-dollar corporations with lobbyists and PACs, there's no "simply" there.
GDPR has been twisted and watered down from "don't collect non-essential private data" into "slap an annoying cookie notice that makes the government look stupid, and continue business as usual".