It’s a toxic mix of both. If it wasn’t for the tracking and data reselling, those pop ups would be unnecessary.
Many also exhibit dark patterns, making it look like accepting everything is the only option, hiding or even flat-out not providing alternatives. That’s the marketing people, not the GDPR
