They are. Pop-ups to allow consent are required to be small enough so usability of the site is not impaired as long as the user has not decided yet. Websites just gamble on the fact that any extra profits they make offset the cost of fines. Or that no entiry reports miss use in the first place.