I think that this approach kind of dissolves the power of the word "consent"

> plainly and unambiguously expresses LACK OF CONSENT by a user

in GDPR terms, consent can never be assumed. In order to be valid, the consent has to be a result of a conscious, explicit action from the user. Things that are opt-out cannot use "consent" as a legitimizing premise