The step we need to take is find one such vendor which delivers non compliant popups, find the customers of those popups, take the 10 biggest ones and give them a nice big fine that's big enough to scare every other business into compliance.
If you (or anyone reading it) include yourself in that "we", you can help with taking that step by writing and/or donating to the nonprofits that are driving these cases. Like the ICCL that posted this article, or e.g. NYOB (https://noyb.eu/).