GDPR 2 needs to require how cookie option pop-ups are supposed to work. There's a lot of mess and dark pattern bad faith efforts.