That what appears to what happened with GDPR, it is much more sensible and covers the common "workarounds" of making the reject harder or blocking the site content if you reject