Companies could stop selling and storing your data. They could only use cookies when absolutely essential. They could use lots of kinds of UX.
This is the equivalent of businesses who put a big visible "20% the state says we have to give our employees healthcare" fee on their bill to throw a hissy fit and hope customers get angry at the government for protecting them instead of the business for exploiting them.
As many have said before:
it's basically malicious compliance. They're supposed to be super annoying ... Instead of complying, they choose this obnoxious practice so they could continue ... monitoring every action a visitor does.
You don't need a cookie banner to be allowed to create Cookies. You only need them if you're using them for something like tracking. [1]
Regulators didn't enforce cookie banners. Cookie banners are a form of malicious compliance. When you complain about them, you are doing the lobbying work of ad companies for free. The correct solution is to just not spy on people, and the problem is that the EU didn't go far enough and just ban the behavior altogether. [2]
Cookie pops are malicious compliance to regulations that legitimately protect consumers. You’ve cherry picked one bad side effect to throw out all the ways the EU is way ahead of anyone else in protecting consumers [3]
We are just conditioned to see it without difference in basic tracking and tracking all your clicks across site and selling it to advertisers.
There's a reason you don't hear about people "maliciously complying" with HIPAA or PCI laws. Because that's just called compliance.
No excuses for poorly done EU regulations.
A comparison would be a store who was angry the law says you have to be 21 to buy alcohol and starts requesting everyone, even people not buying alcohol, to show ID or be kicked out. That's not a bad law, that's a bad business maliciously complying.