Do Not Track didn't work because (1) it was not enforced at the browser level, (2) it had no legal backing and (3) it was not granular enough to be useful. With GDPR, CCPA etc. in place the online privacy landscape is very different, and a new standard is very much possible today. Why did every site in the world implement all the consent popups in the first place when they could have continued to do nothing?