> how many people do actually turn down cookie banners (well I do, but still)
does anyone know why EU hasn't regulated (read: forced) use of DNT headers or a similar mechanism instead of non-standard cookie banners that are obviously being abused in a malicious compliance way?
Seems to me it could've been just "If I send you `DNT: 1`, that means refuse all non-functional cookies".