It's the classic corporate dark pattern to undermine regulations.

Choose the most disruptive, asinine way to comply with them. Then argue that the regulation is at fault, and lobby to have it removed.

For example, there's been plans recently in Norway to tax the salmon farming industry more heavily. The response from the industry has been to pretend that this will completely decimate the industry(we'll have to fire tons of folks to protect our massive profit margins hurr durr), which the numbers don't seem to bear that out. But now they've managed to convince the workers and they've been protesting to "protect their jobs" when they're actually just being used as pawns to protect a billionaire from taxes.

There's 6 legal basis under GDPR, but that's irrelevant for cookies (or anything that allows you to store or retrieve information on the user's device, really), because they're covered by the older ePrivacy directive. If a cookie is not “strictly necessary”, consent is required.