The great "mistake" of GDPR is that it has consent provisions at all.

After previous cookie banners, they really should've known better. (Or, let's be real, absolutely did know, but left it in for corporate interests anyway.)