Don't be silly, the legislation doesn't state that websites have to show cookie popups. It's rather where the term malicious compliance enters the picture, a compliance incentivized by the financial interests of the biggest advertising businesses the world has ever seen.