I've been observing this space and a lot of those smaller companies didn't bother to ensure personal data is safe, so it's not like they're the victims here.

There was already one large crackdown on non-compliant cookie banners, and even large entities had to stop fooling around and implement them properly.

The leftovers need to be picked up one by one, but that necessarily takes time.