The reason sites all have the cookie permission dialog now is because of the GDPR, which has the right idea on data privacy, but the implementation wound up being so terrible that it winds up doing this.

GDPR is not at fault here though, since it does not require asking for consent if the processed data is necessary for the purpose of the provided service. For example, a web shop usually wouldn’t have to ask for permission to store items in the shopping part because that is a necessary part of the online shopping process. In that sense, requiring the consent dialog for all unnecessary purposes is better as you can at least see who’s trying to screw you over. Don’t kill the messenger here.

I think it’s also important to remember that websites can only get away with these annoyances because it a) is easily automatable and b) has been the default mode of operation for decades. If restaurant waiters today started asking guests if they could sell info on what and when you ate, who you were with, and what you looked like, everyone would be creeped out. Before GDPR, it was pretty much normalized to do the same thing on the internet without even asking for consent.