The user-hostile forms aren't actually compliant with the regulation - any form that makes it easier to accept than to decline is against the GDPR and would not count as valid data processing consent, thus you may as well not have one and track by default.
The reason those forms proliferated is because a few snake-oil vendors (TrustArc, etc) sell fake compliance solutions that merely look compliant but actually annoy most people into accepting which is preferred by their (scummy) customers instead of actually-compliant solutions (would put them out of business or force them to severely trim down the marketing/advertising teams).
Since there is no significant enforcement of the regulation, these practices persist.