the cookie consent boxes were a complete disaster anyways, everyone doesn't care because everyone breaks the law by never adding a decline all button so it's just easier to accept all, tracking cookies should have just been outright banned.
This includes big name, big brand sites you've heard of as household names.
The problem in GDPR right now is enforcement - there's not enough technical knowledge or visibility to enforce any of this through regulators, and there's no free market incentive to do it privately either (e.g. punitive damages).