I do this as well, but in case I do want to read the site, I just delete the node from the DOM.

+1 it's a win-win situation. The website announces upfront that they are malicious so I can just leave

> I just press the back button

I do this more and more, and I think it's the right and best thing to do.

Since "legitimate interest" means you don't need consent, they do not let you toggle it off.

If they are showing you a toggle and calling it for "legitimate interest", they are most likely lying.

They love to put cookies under "performance and enhancements" as if that isn't bullshit as well.

All legitimate interest cookies are in the greyed out toggle for "required cookies".

By law, you can decline all and the site should still work fine, which again means they won't allow you to turn off actually needed cookies.

I’m not sure what your experience is but there a many different GDPR dialogues but most are off the shelf components. One in particular (the apps Hoshi and Guriddo use) has maybe 20 legitimate interest toggles and there’s no reject all.

Just because the law says you should have a reject all doesn’t mean sites do it.