Terms that you accept by clicking an "I accept" button can be a proper, considered contract. From what I understand GDPR requires more legible terms of service, in place of the undecipherable legalese one finds now, which could potentially help with the issue of users not understanding what they're accepting.

I don't see why the new rules couldn't have been limited to those of this sort, which ensure that users are providing considered agreement.