They have actually fined several large tracking providers for their shady cookie popups because opting out was harder than opting in.

European DPAs aren't getting enough funding to take on this problem, but they haven't been sitting still either.