cookies could be standardized/semantic - by name or by another cookies’ name (of course, there could still be violations if any part of a cookies value is opaque)
If you had that you could (and I think this is GGP's point) have settings in the browser similar to phone privacy settings: allow cookies for (login || place || shopping cart || etc)