I will not dispute that we need more enforcement, but it definitely exists and helps. For example, Google recently changed their "cookies" dialogue from "More options" to "Reject all".
Agreed about Google, but not only did it tame 4 years for such an obvious breach to be corrected, but I also don’t believe they were even fined for this particular violation - they decided to start complying after the IAB consent flow ruling.
They’ve basically been allowed to willingly and maliciously breach the regulation for 4 years.
Facebook appears to still be getting away with breaching the regulation on so many levels.