The problem with civil litigation against some of these dark patterns is it can be challenging to show quantifiable harm to a magnitude that makes it worth pursuing. Fortunately judges are becoming more keyed-in to the intrinsic value of privacy.

That is probably legally dubious in the EU at least

At the point where laws are enacted the protect the user and their respective data, as well as punishment for breaking said laws is more than just a monetary fine. We can have the protective laws all day, but fines are basically just a license to break them, especially when we are talking about something as lucrative as user data.

When the regulatory bodies start to have more power than the corporations they regulate, we will see change. So, you know, probably never.