It's one reason that software engineering should become a real Engineering profession and not just a title. If your employer asks you do something unethical, it would give you grounds for pushing back. Who would risk losing their license to practice because of a deceptive cookie notice?