Agreed. We need a standard that forbid websites from making popups and setting cookies if the do not track flag is set - alternatively we need all cookies to be marked as optional or required (per the GDPR) and then browsers can handle what to do with them, including just ignoring them completely.
Are we still pretending GDPR did more than add another layer of inconvenience to the web? Users don't care and when they do it's because they bought into the fear mongering the privacy crowd keeps perpetuating. No products of value are made by these regulations.
