The solution to this whole thing has been obvious since the start: Put the power where it belongs, with the user agent (browser), by making the Do Not Track signal legally enforceable.
I'm very pro-Brussels but they've made an absolute hash of this whole thing. Cookie banners are ruining the web, which is the only open app ecosystem we have.