Well, a milder version anyways. Look-up is only country level, not state, and what changes is generally the pop-up rather than the privacy policy. But the tools are already in the marketplace.
When Ford motors started cars already existed, when Facebook started social networks already existed, when Google started search engines already existed, etc.
In my opinion, getting demotivated for not being the first or being “the one” that came up with the idea prevents way too many people from starting their own thing.
In the end, execution and adoption are what really matters. In general is better to copy something and improve on it than trying to invent something completely new.
But of course, most companies assume that the default configuration is compliant, since that's the entire point of the product, right? Companies think the product is a compliance solution itself and therefore compliance is purely an IT problem of deploying the software and legal doesn't need to be involved. But in fact the software is actually a platform for scaling and automating enforcement, and legal actually needs to be involved to figure out what compliance looks like.
There are several studies showing that a huge fraction of GDPR/ePD violations are actually a result of using consent-management software but leaving it in the default configuration.
And then there's what those platforms do, use every dark pattern possible to get the user to perform an action that they can interpret as consent.
Like, if you have a legitimate interest (you need my address to do deliveries to me), then you don't need consent.
But clearly there's no legitimate interest in this case, it's just a dark pattern to get more data.