They found out that they can offload blame on the EU instead and so have chosen to make the web as annoying as possible.
You could probably argue self-hosted, privacy-preserving analytics is a "legitimate business purpose" so doesn't need consent. AFAIK it's because you're sending user data to Google that you normally need consent for GA.
This could be solved on the client side, by requiring all devices with browsers sold in EU to have separate cookie jars per domain and by default those cookies would be deleted on window/tab close. If you wanted to stay logged in to a site, you'd click a button next to the url bar that says "keep cookies for this domain", and be done.
I assume you're pretty well read up on matters of privacy, right? So you have a better awareness and understanding. But do you believe the average person does? Or would you assume that the average person has either been trained to ignore the banner, automatically consent to more invasive tracking, or is generally more confused about why the banner exists, or what it does?
The cookie consent law is the dumbest application of an attempt to improve privacy. It's made the internet worse, and is being used to train people into consenting to giving away their privacy without thinking... because: "clicking accept is what you have to do to use the page" -- every normal person casually browsing any site.
No implementation for cookie based consent can be done correctly.
Personally, I'd love to see a law that makes any/all dark patterns a crime, and empowers state prosecutors via grand jury to bring charges for them against both the company, and individual authors of the specific commits as jointly responsible. I don't want statutory laws, I want a trial jury to look at it, and decide if any technological measure, pattern, tactic, procedure, design, or measurement was used to encourage one decision over the other instead of a fair choice.
I don't want a set of rules that given enough funding any company is able to win as a negative sum game. I want a jury, not a trailing clause, to decide if the company is clearly acting in good faith or worthy of apocalyptic fines.
(Not the person you replied to)
I'm not sure where all of this is coming from, the law is actually extremely obvious and useful: you want to track people, they have to be informed, and have to consent. The law says nothing about how, and the way it was implemented was entirely up to the corporations discretion, which of course opted for the most malicious terrible way to do it, but they did it.
The purpose of the law was that people should be informed about cookies being installed and consent to that happening.
Do you feel like people are now aware that cookies are being installed, more so than before the banner? Do people understand that they are consenting to this?
That is the law at work.
Everything above and beyond that is nice to have, and I'm sure the world would be better for it, but without the EU, people probably wouldn't even know what cookies were, let alone understand (or have control over) how they are being tracked.
If that's not a net positive in a world where net-negatives happen every week, I don't know.