Surprised it didn't mention that consent doesn't mean 'agree to everything or get lost'. For many sites, it seems the only thing they do is ask you to agree to every tracker in existence sight unseen or leave, with no option to choose what cookies you want to allow or to view the content without them running.

Would also be interesting to see a legal critique of the equally common practice of assuming the user gave consent the minute they scroll the page or click anything on it. Seen a few companies argue that, and I suspect it's probably not compliant with GDPR (no matter how they spin it).