I thought this article was a good, brief discussion on cookie banners. The summary is that the EU didn't mandate cookie banners, just acquiring consent. And they forbid common dark patterns making the "no" option more difficult to submit. It's the tech industry that settled on the terrible banners, and many of them (most?) don't actually conform to the law's requirements.

You can complain with your local data protection agency.

Basically the law is that rejecting cookies must be exactly as easy as accepting them, so if there's an "accept all" button, there also has to be a "reject all" button right next to it, same size, same visibility.