That's a myth, perpetuated by the intransigent corporations addicted to #SurveillanceCapitalism and who petulantly spent a lot of pointless effort to annoy every website user.
The #GDPR does not require those banners. Every site could just *abstain from tracking* for anything except essential website functions; no questions required for that.
> Strictly necessary cookies […] it is not required to obtain consent for these cookies […]
> To comply with the regulations governing cookies under the GDPR and the ePrivacy Directive you must:
> Receive users’ consent before you use any cookies except strictly necessary cookies. […]
https://gdpr.eu/cookies/
Every site that thrusts a cookie consent banner at you, has *chosen to do it*. Nothing, certainly not the EU, requires it.
The site is declaring “We would rather make a big change to piss off every visitor, than ever stop tracking people around the web.”