The blah user experience isn't the whole picture for GDPR. It's just been the most visible part of it.

My personal GDPR hot take: it's actually been 2 steps forward and 1 super clumsy super loud and obnoxious step back.

I agree with the spirit of comment above. The common sense part of it (if there is one) might just end up eclipsed by wonky UX absurdity. Someone will find a way to paint this picture that our EU reality is a Kafkaesque dystopia.