You're proving GP's point. The EU's legislation left a doorway open so websites could bully users in to continuing letting them harvest their data. If the EU had gone after browsers instead of individual websites, this wouldn't still be an issue.