I think that would be geared more towards the hippie and headshop market

and here's the increment: Oli

Recognise when the user is pissed up and disable the send button

WE - perhaps not, users - even if they do they can feign ignorance and claim they don't in order to have something to moan about, lawyers - if they know their business they will, marketing artists - as for lawyers. If a site requires tracking cookies further down the line then adding both those and acquiring the users permission should be part and parcel of the same implementation. Besides, as it seems this thread has already established, plonking more complication on the UI than is needed is annoying at the basic level and as is the case with GDPR prompts, misleading if it isn't necessary. Anyway, it doesn't affect me. I already wrote to my MP and told her that I want as many cookies as I can get.

Is it not true though that GDPR doesn't apply to cookie tokens unless they're used for tracking/behavioural analysis? Remember-me's, Csrf tokens, and session tokens that are required only for the purpose of enabling a website to operate don't require any special permission.