Websites did it to themselves by abusing cookies to track users. Instead of consent popups though, the EU should have just blanket banned tracking in general.