What do users gain from cookie warnings?
A reminder that website operators are tracking them and possibly collecting and selling their personal data.
If the website didn't collect the data, it wouldn't need cookie popups - or it could just make them opt-in with a button saying 'click here if you like cookies' - but, apparently, the website operators would rather annoy their
products users than give up all that juicy data.
Cookie permissions need to be addressed by browsers, not websites.
Absolutely the best idea in theory.
Except, in practice:
Q1: Who makes the browsers with the vast majority of market share?
Q2: Who has a massive advertising business that relies on collecting personal data?
Q3: Who has a penchant for making it difficult for third parties to provide content for their platform?
Q4: Who has a history of "malicious compliance" with EU rules?
Q4: So, who do you trust to properly implement browser-based privacy controls?
Also, remember, this is to protect people who are not necessarily tech-savvy and might not be up to configuring their in-browser cookie settings, especially if a browser-maker - let's call them "Schpoogle" - doesn't want you to find them or doesn't make them off-by-default.
The EU did mess up - (a) by not actually mandating the design of the pop-up, leading to deliberately over-complex and confusing designs and (b) by not being a *lot* clearer on the use of non-tracking 'session' cookies for things like maintaining a login session (which, I believe, don't need consent, but don't take my word for it since it is years since I needed to check that and you really have to dig).