According to the rules, accepting or refusing cookies should be equally difficult. Making them both difficult makes people not use your site, so the incentive should be to make both options easy if you follow the rules.

Malicious compliance is to make cookie acceptance much easier than refusal. Lack of oversight doesn’t punish this. Now, the incentive is to make life hard for people who decline cookies. That results in more annoying pop-ups.