Under this legal argument wouldn't youtube just need to add the equivalent of a cookie popup to gain consent?

Or switch to a serverside approach?