The value of privacy in regards to cookies is nuanced and hard to explain. The bureaucrats pushed a policy that is beneficial for privacy, but is user hostile.
Companies benefit by complying with the law and then being able to blame the law creating a public image problem for the law and a hedge against future similar laws (remember the last one? it was bad right).
This is the compromise between surveillance capitalism and privacy.
A more important question is why wasn't there a law banning tracking cookies/other bad behavior (as opposed to cookies used to run the website).
You think it's the bureaucrats pushing the behavior on you, but it's the companies that won't give up their tracking cookies who have influence on the bureaucrats that result in the behavior you see.
Your attribution of the problem to the bureaucrats rather than the companies that used cookies in such a way that motivated the pop up is rewarding companies for bad behavior, which ironically also prevents bureaucrats from doing a better job because when the bureaucrats are blamed for the compromise between capitalist owners and private citizens, it diminishes their power/mandate to curb capitalist power (which is fundamentally the purpose of GDPR).
Who is more evil, the bureaucrats or the companies violating privacy. If the companies did not violate privacy, would we have to deal with cookie pop ups?