Most website also tried to click a hundred different buttons to opt out - that wasn't legal either. Just because enforcement hasn't caught up yet doesn't mean it's not a GDPR violation.