This sort of 'dark pattern' can be found even on otherwise reputable websites, like TomsHardware.

I believe it's against the letter of the GDPR, but as it isn't being enforced, we can expect this kind of thing to continue.