People keep saying this but that's exactly how it's being done. This is what happens with regulation "on principle" instead of by the letter, which is what GDPR chose to be.
My best interpretation is that you feel that people wrongly assume that if they don't accept tracking they will loose access to their services.
That unethical companies tries to push that view isn't particularly unexpected. But that doesn't detract from the massive success it has had in imprinting the notion that personal data must be treated with respect and comes with responsibilities. This is a game changer.
Also now, for the first time, if you are in the know you have something you can do.
I'd really like to know how you would have done this.