> in practice you just have to click an annoying number of accept buttons.

The vast majority of those aren't GDPR-compliant, they're just attempts at paying lip-service while maintaining the old ways, and they're usually illegal.