GDPR should have been approached at browser level. But there would not have been money to make for those that provide "compliant" banners. I guess the economy needed the stimulus.
It's not too late. The EU is breaking Apple's and Google's mobile app store monopolies next year with the Digital Markets Act.
Those same two companies effectively control the browser market. If there's political will in Europe, they can be forced to implement working privacy controls.