This browser plugin automatically accepted a Notion.so pop up to upgrade to enterprise plan. Beware of this plugin!
Come to think of it, a malicious company could probably set up their systems so they get auto-confirmed by the plugin. I'm not sure they'd be valid in that case.
Similar attacks: load the fine print via JS and stick it into an /ads/advertisement.js so adblockers will block the loading of it.
Can the company claim "we showed it to the user, if their software hides it, that's not our problem"?
Is their (or their plugin's, acting as their agent) consent valid because they know about the general framework (tracking cookies)? And would that consent depend on the overlay not including any surprising terms (e.g. "you're also buying a washing machine", "you're also allowing us to mine crypto in your browser" or "we may also use browser finger printing, not just cookies")?