> Instead of just a "Reject all non-essential cookies" button, corporations went the extra mile to instead have a "Manage preferences" button which opens some slow menu with like 70 separate checkboxes, all of which are ticked by default and so you have to go through all of them manually, which then makes like 90% of the users just cave in to the dark pattern and just click "Accept all".
That is not malicious compliance. That's outright non-compliance. Reject All must be as prominent as Accept All.
Guess all of the companies doing that must have missed the memo, though I guess how dire the situation is was more or less known pretty early on: https://arxiv.org/abs/2001.02479
There's limited amount of people who can do the litigation, so it's slow going, and the whole point of the mess is to condition people against GDPR