That's an unduly cynical take in my opinion. GDPR isn't about web sites and cookie preferences, although that is the most visible effect to users.

I'd happily replace that whole cookie mess.