This should have been solved technically, not politically. Why not set cookie rules in the browser settings, and handle at http standard level?
And for GDPR and other privacy rules, cookies aren't even a thing. The laws doesn't care about the medium you use. They apply beyond technicalities. For instance you could track IP addresses and a browser would have no way to stop you. GDPR makes it illegal without involving new crazy tech.