Unpopular opinion: Most cookie banners are technically fake. 🍪

I've been auditing different websites lately, and I'm finding that most of "compliant" banners still fire scripts before the user clicks Accept.

We get the legal requirements ("Prior Consent"), but the implementation seems impossible to maintain without breaking the UX.

I'm building a runtime auditor (SecureSpells) to catch this automatically.

How do you currently check if your banner is actually blocking scripts? Network tab? Manual audit? Or just trust the plugin?

Here are actual stats from a recent scan of 100+ EU-based websites. It gives a scary snapshot of real-world GDPR implementation — specifically how often 'compliant' sites still fail technical audits.