Any reason why this could not be implemented right in the browser? If the browser sends the specific header, either allowing it or disabling it, the server doesn't need to show the opt-in/out nag.
There's no reason a government like California couldn't require honoring DNT (within their jurisdiction, of course, as with the CCPA) and provide penalties for violations.