But also that the popups do not conform to what GDPR demands. Remember, rejecting everything should be the same amount of effort as accepting the settings, and by default non-functional stuff should of course be turned off. If websites followed those rules, we would have way less of a problem here.